| Project |
CVE ID |
Severity |
Score |
Package |
Fix Version |
CWE |
| Project |
Package |
Version |
License |
Risk Level |
Copyleft |
`)`, it is possible to inject arbitrary HTML into the transformed output by supplying a malicious URL query string to `server.transformIndexHtml`. Only apps using `appType: 'custom'` and using the default Vite HTML middleware are affected. The HTML entry must also contain an inline script. The attack requires a user to click on a malicious URL while running the dev server. Restricted files aren't exposed to the attacker. This affects 4.4.0-beta.2 through 4.4.11, 4.5.0, and 5.0.0-beta.0 through 5.0.4.", "cvss": {"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-vite-4.4.9", "similarityId": null, "fixResolutionText": "4.5.6", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-79", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "techgaze-cms", "_project_name": "inmobi-glance/techgaze-cms"}, {"id": "CVE-2024-23331", "cveName": "CVE-2024-23331", "score": 7.5, "severity": "High", "publishDate": "2024-01-19T20:15:00", "references": ["https://github.com/advisories/GHSA-c24v-8rfc-w8vw", "https://github.com/vitejs/vite/pull/15653", "https://github.com/vitejs/vite/commit/89be67de47ae864d646ebeb7bdf5ef8bb8fcc7e1", "https://github.com/vitejs/vite/blob/v5.1.0-beta.2/packages/vite/CHANGELOG.md#510-beta2-2024-01-19"], "referencesData": [{"url": "https://github.com/advisories/GHSA-c24v-8rfc-w8vw", "type": "Advisory", "comment": ""}, {"url": "https://github.com/vitejs/vite/pull/15653", "type": "Pull request", "comment": ""}, {"url": "https://github.com/vitejs/vite/commit/89be67de47ae864d646ebeb7bdf5ef8bb8fcc7e1", "type": "Commit", "comment": ""}, {"url": "https://github.com/vitejs/vite/blob/v5.1.0-beta.2/packages/vite/CHANGELOG.md#510-beta2-2024-01-19", "type": "Release Note", "comment": ""}], "description": "Vite is a frontend tooling framework for javascript. The Vite dev server option `server.fs.deny` can be bypassed on case-insensitive file systems using case-augmented versions of filenames. Notably, this affects servers hosted on Windows. This bypass is similar to CVE-2023-34092 with surface area reduced to hosts having case-insensitive filesystems. Since `picomatch` defaults to case-sensitive glob matching, the file server doesn't discriminate; a blacklist bypass is possible. By requesting raw filesystem paths using augmented casing, the matcher derived from `config.server.fs.deny` fails to block access to sensitive files. This vulnerability affects vite package versions 2.7.0-beta.0 through 2.9.16, 3.0.0-alpha.0 through 3.2.7, 4.0.0-alpha.0 through 4.5.1, 5.0.0-beta.0 through 5.0.11, and 5.1.0-beta.0 through 5.1.0-beta.1. Users are advised to upgrade. Users unable to upgrade should restrict access to dev servers.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-vite-4.4.9", "similarityId": null, "fixResolutionText": "4.5.6", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-178", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "techgaze-cms", "_project_name": "inmobi-glance/techgaze-cms"}, {"id": "CVE-2024-31207", "cveName": "CVE-2024-31207", "score": 5.9, "severity": "Medium", "publishDate": "2024-04-04T16:15:00", "references": ["https://github.com/advisories/GHSA-8jhw-289h-jh2g", "https://github.com/vitejs/vite/blob/v5.2.6/packages/vite/CHANGELOG.md#526-2024-03-24", "https://github.com/vitejs/vite/commit/ba5269cca81de3f5fbb0f49d58a1c55688043258"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8jhw-289h-jh2g", "type": "Advisory", "comment": ""}, {"url": "https://github.com/vitejs/vite/blob/v5.2.6/packages/vite/CHANGELOG.md#526-2024-03-24", "type": "Release Note", "comment": ""}, {"url": "https://github.com/vitejs/vite/commit/ba5269cca81de3f5fbb0f49d58a1c55688043258", "type": "Commit", "comment": ""}], "description": "Vite (French word for \"quick\", pronounced \"/vit/\", like \"veet\") is a frontend build tooling to improve the frontend development experience. \"server.fs.deny\" does not deny requests for patterns with directories. This issue affects vite versions 2.7.0-beta.0 through 2.9.17, 3.0.0-alpha.0 through 3.2.8, 4.0.0-alpha.0 through 4.5.2, 5.0.0-beta.0 through 5.0.12, 5.1.0-beta.0 through 5.1.6, 5.2.0-beta.0 through 5.2.5. ", "cvss": {"score": 5.9, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.9, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-vite-4.4.9", "similarityId": null, "fixResolutionText": "4.5.6", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-200", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "techgaze-cms", "_project_name": "inmobi-glance/techgaze-cms"}, {"id": "CVE-2024-45811", "cveName": "CVE-2024-45811", "score": 4.8, "severity": "Medium", "publishDate": "2024-09-17T20:15:00", "references": ["https://github.com/advisories/GHSA-9cwx-2883-4wfx", "https://github.com/vitejs/vite/commit/9d2413c8b64bfb1dfd953340b4e1b5972d5440aa", "https://github.com/vitejs/vite/pull/18112", "https://github.com/vitejs/vite/blob/v5.4.6/packages/vite/CHANGELOG.md#546-2024-09-16"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9cwx-2883-4wfx", "type": "Advisory", "comment": ""}, {"url": "https://github.com/vitejs/vite/commit/9d2413c8b64bfb1dfd953340b4e1b5972d5440aa", "type": "Commit", "comment": ""}, {"url": "https://github.com/vitejs/vite/pull/18112", "type": "Pull request", "comment": ""}, {"url": "https://github.com/vitejs/vite/blob/v5.4.6/packages/vite/CHANGELOG.md#546-2024-09-16", "type": "Release Note", "comment": ""}], "description": "Vite a frontend build tooling framework for JavaScript. In versions through 3.2.10, 4.0.0-alpha.0 through 4.5.3, 5.0.0-beta.0 through 5.1.7, 5.2.0-beta.0 through 5.2.13, 5.3.0-beta.0 through 5.3.5 and 5.4.0-beta.0 through 5.4.5, and 6.0.0-alpha.0 through 6.0.0-beta.0 the contents of arbitrary files can be returned to the browser. `@fs` denies access to files outside of Vite serving allow list. Adding `?import&raw` to the URL bypasses this limitation and returns the file content if it exists. Users are advised to upgrade. There are no known workarounds for this vulnerability.", "cvss": {"score": 4.8, "attackVector": "ADJACENT NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.8, "attackVector": "ADJACENT NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-vite-4.4.9", "similarityId": null, "fixResolutionText": "4.5.6", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-200", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "techgaze-cms", "_project_name": "inmobi-glance/techgaze-cms"}, {"id": "CVE-2024-45812", "cveName": "CVE-2024-45812", "score": 6.4, "severity": "Medium", "publishDate": "2024-09-17T20:15:00", "references": ["https://github.com/advisories/GHSA-64vr-g452-qvp3", "https://bugzilla.redhat.com/show_bug.cgi?id=2312935", "https://github.com/vitejs/vite/blob/v5.4.6/packages/vite/CHANGELOG.md#546-2024-09-16", "https://github.com/vitejs/vite/commit/ade1d89660e17eedfd35652165b0c26905259fad", "https://github.com/vitejs/vite/pull/18115"], "referencesData": [{"url": "https://github.com/advisories/GHSA-64vr-g452-qvp3", "type": "Advisory", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2312935", "type": "Issue", "comment": ""}, {"url": "https://github.com/vitejs/vite/blob/v5.4.6/packages/vite/CHANGELOG.md#546-2024-09-16", "type": "Release Note", "comment": ""}, {"url": "https://github.com/vitejs/vite/commit/ade1d89660e17eedfd35652165b0c26905259fad", "type": "Commit", "comment": ""}, {"url": "https://github.com/vitejs/vite/pull/18115", "type": "Pull request", "comment": ""}], "description": "Vite a frontend build tooling framework for javascript. In vite versions through 3.2.10, 4.0.0-alpha.0 through 4.5.3, 5.0.0-beta.0 through 5.1.7, 5.2.0-beta.0 through 5.2.13, 5.3.0-beta.0 through 5.3.5, 5.4.0-beta.0 through 5.4.5, and 6.0.0-alpha.0 through 6.0.0-beta.0 were discovered to contain a DOM Clobbering vulnerability when building scripts to `cjs`/`iife`/`umd` output format. The DOM Clobbering gadget in the module can lead to cross-site scripting (XSS) in web pages where scriptless attacker-controlled HTML elements (e.g., an img tag with an unsanitized name attribute) are present. DOM Clobbering is a type of code-reuse attack where the attacker first embeds a piece of non-script, seemingly benign HTML markups in the webpage (e.g. through a post or comment) and leverages the gadgets (pieces of js code) living in the existing javascript code to transform it into executable code. We have identified a DOM Clobbering vulnerability in Vite bundled scripts, particularly when the scripts dynamically import other scripts from the assets folder and the developer sets the build output format to `cjs`, `iife`, or `umd`. In such cases, Vite replaces relative paths starting with `__VITE_ASSET__` using the URL retrieved from `document.currentScript`. However, this implementation is vulnerable to a DOM Clobbering attack. The `document.currentScript` lookup can be shadowed by an attacker via the browser's named DOM tree element access mechanism. This manipulation allows an attacker to replace the intended script element with a malicious HTML element. When this happens, the src attribute of the attacker-controlled element is used as the URL for importing scripts, potentially leading to the dynamic loading of scripts from an attacker-controlled server. This vulnerability can result in cross-site scripting (XSS) attacks on websites that include Vite-bundled files (configured with an output format of `cjs`, `iife`, or `umd`) and allow users to inject certain scriptless HTML tags without properly sanitizing the `name` or `id` attributes. Users are advised to upgrade. There are no known workarounds for this vulnerability.", "cvss": {"score": 6.4, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.4, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-vite-4.4.9", "similarityId": null, "fixResolutionText": "4.5.6", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-79", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "techgaze-cms", "_project_name": "inmobi-glance/techgaze-cms"}, {"id": "CVE-2025-24010", "cveName": "CVE-2025-24010", "score": 6.5, "severity": "Medium", "publishDate": "2025-01-20T16:15:28", "references": ["https://github.com/advisories/GHSA-vg6x-rcgg-rjx6", "https://github.com/vitejs/vite/pull/19234", "https://github.com/vitejs/vite/commit/bd896fb5f312fc0ff1730166d1d142fc0d34ba6d"], "referencesData": [{"url": "https://github.com/advisories/GHSA-vg6x-rcgg-rjx6", "type": "Advisory", "comment": ""}, {"url": "https://github.com/vitejs/vite/pull/19234", "type": "Pull request", "comment": ""}, {"url": "https://github.com/vitejs/vite/commit/bd896fb5f312fc0ff1730166d1d142fc0d34ba6d", "type": "Commit", "comment": ""}], "description": "Vite is a frontend tooling framework for JavaScript. Vite allowed any websites to send any requests to the development server and read the response due to default CORS settings and lack of validation on the Origin header for WebSocket connections. This vulnerability is fixed in versions 6.0.9, 5.4.12, and 4.5.6.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-vite-4.4.9", "similarityId": null, "fixResolutionText": "4.5.6", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1385", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "techgaze-cms", "_project_name": "inmobi-glance/techgaze-cms"}, {"id": "CVE-2024-29180", "cveName": "CVE-2024-29180", "score": 7.5, "severity": "High", "publishDate": "2024-03-21T17:15:09", "references": ["https://github.com/advisories/GHSA-wr3j-pwj9-hqq6", "https://github.com/webpack/webpack-dev-middleware/pull/1771", "https://github.com/webpack/webpack-dev-middleware/commit/e10008c762e4d5821ed6990348dabf0d4d93a10e", "https://github.com/webpack/webpack-dev-middleware/releases/tag/v7.1.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-wr3j-pwj9-hqq6", "type": "Advisory", "comment": ""}, {"url": "https://github.com/webpack/webpack-dev-middleware/pull/1771", "type": "Pull request", "comment": ""}, {"url": "https://github.com/webpack/webpack-dev-middleware/commit/e10008c762e4d5821ed6990348dabf0d4d93a10e", "type": "Commit", "comment": ""}, {"url": "https://github.com/webpack/webpack-dev-middleware/releases/tag/v7.1.0", "type": "Release Note", "comment": ""}], "description": "In webpack-dev-middleware versions prior to 5.3.4, 6.x.x prior to 6.1.2, and 7.0.0 the development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file. It is possible to access any file on the developer's machine. The middleware can either work with the physical filesystem when reading the files or it can use a virtualized in-memory `memfs` filesystem. If `writeToDisk` configuration option is set to `true`, the physical filesystem is used. The `getFilenameFromUrl` method is used to parse URL and build the local file path. The public path prefix is stripped from the URL, and the `unsecaped` path suffix is appended to the `outputPath`. As the URL is not unescaped and normalized automatically before calling the midlleware, it is possible to use `%2e` and `%2f` sequences to perform path traversal attack.\n\nDevelopers using `webpack-dev-server` or `webpack-dev-middleware` are affected by the issue. When the project is started, an attacker might access any file on the developer's machine and exfiltrate the content. If the development server is listening on a public IP address (or `0.0.0.0`), an attacker on the local network can access the local files without any interaction from the victim (direct connection to the port). If the server allows access from third-party domains, an attacker can send a malicious link to the victim. When visited, the client-side script can connect to the local server and exfiltrate the local files. ", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-webpack-dev-middleware-6.1.1", "similarityId": null, "fixResolutionText": "6.1.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-22", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "techgaze-cms", "_project_name": "inmobi-glance/techgaze-cms"}, {"id": "CVE-2024-37890", "cveName": "CVE-2024-37890", "score": 7.5, "severity": "High", "publishDate": "2024-06-17T20:15:00", "references": ["https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "https://github.com/websockets/ws/issues/2230", "https://github.com/websockets/ws/pull/2231", "https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c", "https://github.com/websockets/ws/releases/tag/8.17.1"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "type": "Advisory", "comment": ""}, {"url": "https://github.com/websockets/ws/issues/2230", "type": "Issue", "comment": ""}, {"url": "https://github.com/websockets/ws/pull/2231", "type": "Pull request", "comment": ""}, {"url": "https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c", "type": "Commit", "comment": ""}, {"url": "https://github.com/websockets/ws/releases/tag/8.17.1", "type": "Release Note", "comment": ""}], "description": "The ws is an open-source WebSocket client and server for Node.js. A request with a number of headers exceeding the \"server.maxHeadersCount\" threshold could be used to crash a ws server. In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the \"--max-http-header-size=size\" and/or the \"maxHeaderSize\" options so that no more headers than the \"server.maxHeadersCount\" limit can be sent. 2. Set \"server.maxHeadersCount\" to \"0\" so that no limit is applied. This issue affects the package ws versions 2.1.0 through 5.2.3, 6.0.0 through 6.2.2, 7.0.0 through 7.5.9, and 8.0.0 through 8.17.0.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-ws-8.13.0", "similarityId": null, "fixResolutionText": "8.17.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-476", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "techgaze-cms", "_project_name": "inmobi-glance/techgaze-cms"}, {"id": "CVE-2024-39338", "cveName": "CVE-2024-39338", "score": 7.5, "severity": "High", "publishDate": "2024-08-12T13:38:00", "references": ["https://github.com/advisories/GHSA-8hc4-vh64-cxmj", "https://jeffhacks.com/advisories/2024/06/24/CVE-2024-39338.html", "https://github.com/axios/axios/issues/6463", "https://github.com/axios/axios/pull/6543", "https://github.com/axios/axios/commit/6b6b605eaf73852fb2dae033f1e786155959de3a", "https://github.com/axios/axios/releases/tag/v1.7.4"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8hc4-vh64-cxmj", "type": "Advisory", "comment": ""}, {"url": "https://jeffhacks.com/advisories/2024/06/24/CVE-2024-39338.html", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/axios/axios/issues/6463", "type": "Issue", "comment": ""}, {"url": "https://github.com/axios/axios/pull/6543", "type": "Pull request", "comment": ""}, {"url": "https://github.com/axios/axios/commit/6b6b605eaf73852fb2dae033f1e786155959de3a", "type": "Commit", "comment": ""}, {"url": "https://github.com/axios/axios/releases/tag/v1.7.4", "type": "Release Note", "comment": ""}], "description": "The package axios allows SSRF via unexpected behaviour where requests for path-relative URLs get processed as protocol-relative URLs. This issue affects versions 1.3.2 through 1.7.3.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-axios-1.6.0", "similarityId": null, "fixResolutionText": "1.7.4", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-918", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "CVE-2024-4068", "cveName": "CVE-2024-4068", "score": 7.5, "severity": "High", "publishDate": "2024-05-14T15:42:48", "references": ["https://advisory.checkmarx.net/advisory/CVE-2024-4068/", "https://github.com/micromatch/braces/issues/35", "https://github.com/advisories/GHSA-grv7-fg5c-xmjg", "https://github.com/micromatch/braces/pull/37", "https://github.com/micromatch/braces/pull/40", "https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff"], "referencesData": [{"url": "https://advisory.checkmarx.net/advisory/CVE-2024-4068/", "type": "Advisory", "comment": ""}, {"url": "https://github.com/micromatch/braces/issues/35", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-grv7-fg5c-xmjg", "type": "Advisory", "comment": ""}, {"url": "https://github.com/micromatch/braces/pull/37", "type": "Pull request", "comment": "Reverted fix"}, {"url": "https://github.com/micromatch/braces/pull/40", "type": "Pull request", "comment": "Fix PR"}, {"url": "https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff", "type": "Commit", "comment": "Lower defaultLength to 10000"}], "description": "The NPM package \"braces\", versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In \"lib/parse.js,\" if a malicious user sends \"imbalanced braces\" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-braces-3.0.2", "similarityId": null, "fixResolutionText": "3.0.3", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1050", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "CVE-2024-21538", "cveName": "CVE-2024-21538", "score": 7.7, "severity": "High", "publishDate": "2024-11-08T05:15:06", "references": ["https://github.com/advisories/GHSA-3xgq-45jj-v275", "https://github.com/moxystudio/node-cross-spawn/issues/165", "https://github.com/moxystudio/node-cross-spawn/pull/160", "https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff", "https://github.com/moxystudio/node-cross-spawn/issues/163", "https://github.com/moxystudio/node-cross-spawn/pull/162", "https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f", "https://github.com/moxystudio/node-cross-spawn/blob/v7.0.5/CHANGELOG.md"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "type": "Advisory", "comment": ""}, {"url": "https://github.com/moxystudio/node-cross-spawn/issues/165", "type": "Issue", "comment": ""}, {"url": "https://github.com/moxystudio/node-cross-spawn/pull/160", "type": "Pull request", "comment": "Initial PR"}, {"url": "https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff", "type": "Commit", "comment": "Initial fix"}, {"url": "https://github.com/moxystudio/node-cross-spawn/issues/163", "type": "Issue", "comment": ""}, {"url": "https://github.com/moxystudio/node-cross-spawn/pull/162", "type": "Pull request", "comment": "Additional PR"}, {"url": "https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f", "type": "Commit", "comment": "Additional fix"}, {"url": "https://github.com/moxystudio/node-cross-spawn/blob/v7.0.5/CHANGELOG.md", "type": "Release Note", "comment": ""}], "description": "Versions of the package cross-spawn prior to 6.0.6 and 7.x prior to 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS), due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-cross-spawn-7.0.3", "similarityId": null, "fixResolutionText": "7.0.5", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "Cx8bc4df28-fcf5", "cveName": "Cx8bc4df28-fcf5", "score": 3.7, "severity": "Low", "publishDate": "2020-12-10T17:14:00", "references": ["https://github.com/debug-js/debug/issues/737", "https://github.com/debug-js/debug/issues/656", "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "https://github.com/debug-js/debug/releases/tag/4.4.0"], "referencesData": [{"url": "https://github.com/debug-js/debug/issues/737", "type": "Issue", "comment": ""}, {"url": "https://github.com/debug-js/debug/issues/656", "type": "Other", "comment": "Roadmap that mentions Issue"}, {"url": "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "type": "POC/Exploit", "comment": ""}, {"url": "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "type": "Commit", "comment": ""}, {"url": "https://github.com/debug-js/debug/releases/tag/4.4.0", "type": "Release Note", "comment": ""}], "description": "In NPM \"debug\" versions prior to 4.4.0, the \"enable\" function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.", "cvss": {"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Npm-debug-3.2.7", "similarityId": null, "fixResolutionText": "4.4.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "Cx8bc4df28-fcf5", "cveName": "Cx8bc4df28-fcf5", "score": 3.7, "severity": "Low", "publishDate": "2020-12-10T17:14:00", "references": ["https://github.com/debug-js/debug/issues/737", "https://github.com/debug-js/debug/issues/656", "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "https://github.com/debug-js/debug/releases/tag/4.4.0"], "referencesData": [{"url": "https://github.com/debug-js/debug/issues/737", "type": "Issue", "comment": ""}, {"url": "https://github.com/debug-js/debug/issues/656", "type": "Other", "comment": "Roadmap that mentions Issue"}, {"url": "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "type": "POC/Exploit", "comment": ""}, {"url": "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "type": "Commit", "comment": ""}, {"url": "https://github.com/debug-js/debug/releases/tag/4.4.0", "type": "Release Note", "comment": ""}], "description": "In NPM \"debug\" versions prior to 4.4.0, the \"enable\" function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.", "cvss": {"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Npm-debug-4.3.4", "similarityId": null, "fixResolutionText": "4.4.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "CVE-2024-11023", "cveName": "CVE-2024-11023", "score": 5.2, "severity": "Medium", "publishDate": "2024-11-18T11:15:05", "references": ["https://github.com/advisories/GHSA-3wf4-68gx-mph8", "https://github.com/firebase/firebase-js-sdk/commit/245dd26e19b6c16aca7e1b7e597ed5784c2984ba", "https://github.com/firebase/firebase-js-sdk/pull/8056", "https://firebase.google.com/support/release-notes/js#version_1090_-_march_14_2024"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3wf4-68gx-mph8", "type": "Advisory", "comment": ""}, {"url": "https://github.com/firebase/firebase-js-sdk/commit/245dd26e19b6c16aca7e1b7e597ed5784c2984ba", "type": "Commit", "comment": ""}, {"url": "https://github.com/firebase/firebase-js-sdk/pull/8056", "type": "Pull request", "comment": ""}, {"url": "https://firebase.google.com/support/release-notes/js#version_1090_-_march_14_2024", "type": "Release Note", "comment": ""}], "description": "Firebase JavaScript SDK utilizes a \"FIREBASE_DEFAULTS\" cookie to store configuration data, including an \"_authTokenSyncURL\" field used for session synchronization. If this cookie field is preset via an attacker by any other method, the attacker can manipulate the \"_authTokenSyncURL\" to point to their own server and it would allow an actor to capture user session data transmitted by the SDK. We recommend upgrading Firebase JS SDK at least to 10.9.0. This issue affects @firebase/auth versions 0.20.7-canary.fdd4ab464 through 1.6.1-canary.e60188d47. ", "cvss": {"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-@firebase/auth-1.3.0", "similarityId": null, "fixResolutionText": "1.6.1-canary.ce88e71e7", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-79", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "CVE-2024-28849", "cveName": "CVE-2024-28849", "score": 6.5, "severity": "Medium", "publishDate": "2024-03-14T17:15:52", "references": ["https://github.com/advisories/GHSA-cxjh-pqwp-8mfp", "https://github.com/follow-redirects/follow-redirects/commit/c4f847f85176991f95ab9c88af63b1294de8649b", "https://bugzilla.redhat.com/show_bug.cgi?id=2269576"], "referencesData": [{"url": "https://github.com/advisories/GHSA-cxjh-pqwp-8mfp", "type": "Advisory", "comment": ""}, {"url": "https://github.com/follow-redirects/follow-redirects/commit/c4f847f85176991f95ab9c88af63b1294de8649b", "type": "Commit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2269576", "type": "Issue", "comment": ""}], "description": "follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. In affected versions follow-redirects only clears authorization header during cross-domain redirect, but keep the proxy-authentication header which contains credentials too. This vulnerability may lead to credentials leak. This issue affects follow-redirects versions prior to 1.15.6. Users are advised to upgrade. There are no known workarounds for this vulnerability.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-follow-redirects-1.15.3", "similarityId": null, "fixResolutionText": "1.15.6", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-200", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "CVE-2023-26159", "cveName": "CVE-2023-26159", "score": 6.1, "severity": "Medium", "publishDate": "2024-01-02T05:15:00", "references": ["https://github.com/advisories/GHSA-jchw-25xp-jwwc", "https://github.com/follow-redirects/follow-redirects/issues/235", "https://github.com/follow-redirects/follow-redirects/pull/236", "https://github.com/follow-redirects/follow-redirects/commit/7a6567e16dfa9ad18a70bfe91784c28653fbf19d"], "referencesData": [{"url": "https://github.com/advisories/GHSA-jchw-25xp-jwwc", "type": "Advisory", "comment": ""}, {"url": "https://github.com/follow-redirects/follow-redirects/issues/235", "type": "Issue", "comment": ""}, {"url": "https://github.com/follow-redirects/follow-redirects/pull/236", "type": "Pull request", "comment": ""}, {"url": "https://github.com/follow-redirects/follow-redirects/commit/7a6567e16dfa9ad18a70bfe91784c28653fbf19d", "type": "Commit", "comment": ""}], "description": "The package follow-redirects versions prior to 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the \"url.parse()\" function. When a new \"URL()\" throws an error, it can be manipulated to misinterpret the hostname. An attacker could exploit this weakness to redirect traffic to a malicious site, potentially leading to information disclosure, phishing attacks, or other security breaches.", "cvss": {"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-follow-redirects-1.15.3", "similarityId": null, "fixResolutionText": "1.15.6", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-601", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "CVE-2024-37168", "cveName": "CVE-2024-37168", "score": 5.3, "severity": "Medium", "publishDate": "2024-06-10T22:15:00", "references": ["https://github.com/advisories/GHSA-7v5v-9h63-cj86", "https://github.com/grpc/grpc-node/commit/674f4e351a619fd4532f84ae6dff96b8ee4e1ed3", "https://github.com/grpc/grpc-node/commit/a8a020339c7eab1347a343a512ad17a4aea4bfdb"], "referencesData": [{"url": "https://github.com/advisories/GHSA-7v5v-9h63-cj86", "type": "Advisory", "comment": ""}, {"url": "https://github.com/grpc/grpc-node/commit/674f4e351a619fd4532f84ae6dff96b8ee4e1ed3", "type": "Commit", "comment": "1.10.x"}, {"url": "https://github.com/grpc/grpc-node/commit/a8a020339c7eab1347a343a512ad17a4aea4bfdb", "type": "Commit", "comment": "1.8.x"}], "description": "@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. In @grpc/grpc-js versions through 1.8.21, 1.9.0 through 1.9.14, and 1.10.0 through 1.10.8, there are two separate code paths in which memory can be allocated per message in excess of the \"grpc.max_receive_message_length\" channel option: If an incoming message has a size on the wire greater than the configured limit, the entire message is buffered before it is discarded; and/or if an incoming message has a size within the limit on the wire but decompresses to a size greater than the limit, the entire message is decompressed into memory, and on the server is not discarded.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-@grpc/grpc-js-1.9.6", "similarityId": null, "fixResolutionText": "1.9.15", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-789", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "Cxdca8e59f-8bfe", "cveName": "Cxdca8e59f-8bfe", "score": 7.5, "severity": "High", "publishDate": "2020-12-07T10:10:00", "references": ["https://github.com/npm/inflight/issues/5"], "referencesData": [{"url": "https://github.com/npm/inflight/issues/5", "type": "Issue", "comment": ""}], "description": "In NPM `inflight` there is a Memory Leak because some resources are not freed correctly after being used. It appears to affect all versions, as the issue was not addressed and no fix is found. NOTE: In the meantime, `logdna-agent`, a package that depends on `inflight`, has merged a commit to address this solely in their package (so it should be fixed in `logdna-agent` in versions 1.6.5 and later). `Node-glob`, a package that also depends on `inflight`, was also planning to address this by not using `inflight` after version 8 is released, but it is still being used.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-inflight-1.0.6", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-772", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "CVE-2024-4067", "cveName": "CVE-2024-4067", "score": 5.3, "severity": "Medium", "publishDate": "2024-05-14T15:42:47", "references": ["https://advisory.checkmarx.net/advisory/CVE-2024-4067/", "https://github.com/micromatch/micromatch/pull/266", "https://github.com/micromatch/micromatch/commit/03aa8052171e878897eee5d7bb2ae0ae83ec2ade", "https://github.com/micromatch/micromatch/releases/tag/4.0.8", "https://github.com/advisories/GHSA-952p-6rrq-rcjv"], "referencesData": [{"url": "https://advisory.checkmarx.net/advisory/CVE-2024-4067/", "type": "Advisory", "comment": ""}, {"url": "https://github.com/micromatch/micromatch/pull/266", "type": "Pull request", "comment": ""}, {"url": "https://github.com/micromatch/micromatch/commit/03aa8052171e878897eee5d7bb2ae0ae83ec2ade", "type": "Commit", "comment": ""}, {"url": "https://github.com/micromatch/micromatch/releases/tag/4.0.8", "type": "Release Note", "comment": ""}, {"url": "https://github.com/advisories/GHSA-952p-6rrq-rcjv", "type": "Advisory", "comment": "GHSA"}], "description": "The NPM package \"micromatch\" prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in \"micromatch.braces()\" in \"index.js\" because the pattern \".*\" will greedily match anything. By passing a malicious payload, the pattern matching will keep backtracking to the input while it doesn't find the closing bracket. As the input size increases, the consumption time will also increase until it causes the application to hang or slow down. There was a merged fix but further testing shows the issue still persists. This issue should be mitigated by using a safe pattern that won't start backtracking the regular expression due to its greedy matching.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-micromatch-4.0.5", "similarityId": null, "fixResolutionText": "4.0.8", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "CVE-2024-55565", "cveName": "CVE-2024-55565", "score": 6.3, "severity": "Medium", "publishDate": "2024-12-09T02:15:00", "references": ["https://github.com/advisories/GHSA-mwcw-c2x4-8c55", "https://github.com/ai/nanoid/pull/510", "https://github.com/ai/nanoid/commit/d643045f40d6dc8afa000a644d857da1436ed08c", "https://github.com/ai/nanoid/releases/tag/5.0.9"], "referencesData": [{"url": "https://github.com/advisories/GHSA-mwcw-c2x4-8c55", "type": "Advisory", "comment": ""}, {"url": "https://github.com/ai/nanoid/pull/510", "type": "Pull request", "comment": ""}, {"url": "https://github.com/ai/nanoid/commit/d643045f40d6dc8afa000a644d857da1436ed08c", "type": "Commit", "comment": ""}, {"url": "https://github.com/ai/nanoid/releases/tag/5.0.9", "type": "Release Note", "comment": ""}], "description": "The package nanoid versions through 3.3.7 and 4.0.0 through 5.0.8 mishandle non-integer values. ", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Npm-nanoid-3.3.6", "similarityId": null, "fixResolutionText": "3.3.8", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-835", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "CVE-2024-56332", "cveName": "CVE-2024-56332", "score": 5.3, "severity": "Medium", "publishDate": "2025-01-03T21:15:13", "references": ["https://github.com/advisories/GHSA-7m27-7ghc-44w9"], "referencesData": [{"url": "https://github.com/advisories/GHSA-7m27-7ghc-44w9", "type": "Advisory", "comment": ""}], "description": "Next.js is a React framework for building full-stack web applications. Starting in version 13.0.0 through 13.5.7, 14.0.0 through 14.2.20, and 15.0.0 through 15.1.1 Next.js is vulnerable to a Denial of Service (DoS) attack that allows attackers to construct requests that leave requests to Server Actions hanging until the hosting provider cancels the function execution. This vulnerability can also be used as a Denial of Wallet (DoW) attack when deployed in providers billing by response times. (Note: Next.js server is idle during that time and only keeps the connection open. CPU and memory footprint are low during that time.). Deployments without any protection against long-running Server Action invocations are especially vulnerable. Hosting providers like Vercel or Netlify set a default maximum duration on function execution to reduce the risk of excessive billing. This is the same issue as if the incoming HTTP request has an invalid `Content-Length` header or never closes. If the host has no other mitigations, then this vulnerability is novel. This vulnerability affects only Next.js deployments using Server Actions.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-next-13.5.6", "similarityId": null, "fixResolutionText": "13.5.8", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "CVE-2024-51479", "cveName": "CVE-2024-51479", "score": 7.5, "severity": "High", "publishDate": "2024-12-17T19:15:06", "references": ["https://github.com/advisories/GHSA-7gfc-8cq8-jh5f", "https://github.com/vercel/next.js/releases/tag/v15.0.0-canary.178", "https://github.com/vercel/next.js/commit/d0cbe64e8783740ecc1315e04757008f624a0dbd", "https://github.com/vercel/next.js/pull/70761"], "referencesData": [{"url": "https://github.com/advisories/GHSA-7gfc-8cq8-jh5f", "type": "Advisory", "comment": ""}, {"url": "https://github.com/vercel/next.js/releases/tag/v15.0.0-canary.178", "type": "Release Note", "comment": ""}, {"url": "https://github.com/vercel/next.js/commit/d0cbe64e8783740ecc1315e04757008f624a0dbd", "type": "Commit", "comment": ""}, {"url": "https://github.com/vercel/next.js/pull/70761", "type": "Pull request", "comment": ""}], "description": "Next.js is a React framework for building full-stack web applications. In versions 9.5.5-canary.0 through 14.2.14 and 14.3.0-canary.0 through 15.0.0-canary.177, if a Next.js application is performing authorization in middleware based on pathname, it was possible for this authorization to be bypassed for pages directly under the application's root directory. If your Next.js application is hosted on Vercel, this vulnerability has been automatically mitigated, regardless of Next.js version. ", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-next-13.5.6", "similarityId": null, "fixResolutionText": "13.5.8", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-863", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "CVE-2024-34351", "cveName": "CVE-2024-34351", "score": 7.5, "severity": "High", "publishDate": "2024-05-14T15:38:42", "references": ["https://github.com/advisories/GHSA-fr5h-rqp8-mj6g", "https://github.com/vercel/next.js/releases/tag/v14.1.1", "https://github.com/vercel/next.js/pull/62561", "https://github.com/vercel/next.js/commit/8f7a6ca7d21a97bc9f7a1bbe10427b5ad74b9085"], "referencesData": [{"url": "https://github.com/advisories/GHSA-fr5h-rqp8-mj6g", "type": "Advisory", "comment": ""}, {"url": "https://github.com/vercel/next.js/releases/tag/v14.1.1", "type": "Release Note", "comment": ""}, {"url": "https://github.com/vercel/next.js/pull/62561", "type": "Pull request", "comment": ""}, {"url": "https://github.com/vercel/next.js/commit/8f7a6ca7d21a97bc9f7a1bbe10427b5ad74b9085", "type": "Commit", "comment": ""}], "description": "Next.js is a React framework that can provide building blocks to create web applications. A Server-Side Request Forgery (SSRF) vulnerability was identified in Next.js Server Actions. If the `Host` header is modified, and the below conditions are also met, an attacker may be able to make requests that appear to be originating from the Next.js application server itself. The required conditions are Next.js is running in a self-hosted manner, the Next.js application makes use of Server Actions, and the Server Action performs a redirect to a relative path which starts with a `/`. This issue affects next versions 13.4.0 through 14.1.1-canary.74.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-next-13.5.6", "similarityId": null, "fixResolutionText": "13.5.8", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-918", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "CVE-2024-46982", "cveName": "CVE-2024-46982", "score": 8.7, "severity": "High", "publishDate": "2024-09-17T22:15:02", "references": ["https://github.com/advisories/GHSA-gp8f-8m3g-qvj9", "https://github.com/vercel/next.js/releases/tag/v14.2.10", "https://github.com/vercel/next.js/commit/7ed7f125e07ef0517a331009ed7e32691ba403d3", "https://github.com/vercel/next.js/pull/69990"], "referencesData": [{"url": "https://github.com/advisories/GHSA-gp8f-8m3g-qvj9", "type": "Advisory", "comment": ""}, {"url": "https://github.com/vercel/next.js/releases/tag/v14.2.10", "type": "Release Note", "comment": ""}, {"url": "https://github.com/vercel/next.js/commit/7ed7f125e07ef0517a331009ed7e32691ba403d3", "type": "Commit", "comment": ""}, {"url": "https://github.com/vercel/next.js/pull/69990", "type": "Pull request", "comment": ""}], "description": "Next.js is a React framework for building full-stack web applications. Sending a crafted HTTP request can poison the cache of a non-dynamic server-side rendered route in the page's router (this does not affect the app router). When this crafted request is sent, it could coerce Next.js to cache a route that is not meant to be cached and send a \"Cache-Control: s-maxage=1, stale-while-revalidate\" header, which some upstream CDNs may cache as well. To be potentially affected, all of the following must apply: Next.js versions 13.5.1-canary.0 through 13.5.6, and 14.0.0 through 14.2.9, using the pages router, and using non-dynamic server-side rendered routes (e.g. \"pages/dashboard.tsx,\" not \"pages/blog/[slug].tsx\"). We recommend upgrading regardless of whether you can reproduce the issue or not. There are no official or recommended workarounds for this issue; we recommend that users patch to a safe version.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-next-13.5.6", "similarityId": null, "fixResolutionText": "13.5.8", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-639", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "CVE-2024-47831", "cveName": "CVE-2024-47831", "score": 7.5, "severity": "High", "publishDate": "2024-10-14T18:15:00", "references": ["https://github.com/advisories/GHSA-g77x-44xx-532m", "https://github.com/vercel/next.js/commit/d11cbc9ff0b1aaefabcba9afe1e562e0b1fde65a", "https://github.com/vercel/next.js/pull/68628", "https://github.com/vercel/next.js/releases/tag/v14.2.7"], "referencesData": [{"url": "https://github.com/advisories/GHSA-g77x-44xx-532m", "type": "Advisory", "comment": ""}, {"url": "https://github.com/vercel/next.js/commit/d11cbc9ff0b1aaefabcba9afe1e562e0b1fde65a", "type": "Commit", "comment": ""}, {"url": "https://github.com/vercel/next.js/pull/68628", "type": "Pull request", "comment": ""}, {"url": "https://github.com/vercel/next.js/releases/tag/v14.2.7", "type": "Release Note", "comment": ""}], "description": "Next.js is a React Framework for the Web. It contains a vulnerability in the image optimization feature that allows for a potential Denial of Service (DoS) condition that could lead to excessive CPU consumption. Neither the \"next.config.js\" file configured with \"images.unoptimized\" set to \"true'\" or \"images.loader\" set to a non-default value nor the Next.js application hosted on Vercel is affected. This issue affects versions 10.0.0 through 14.2.6 and 14.3.0-canary.0 through 5.0.0-canary.108.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-next-13.5.6", "similarityId": null, "fixResolutionText": "13.5.8", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-674", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "CVE-2024-47068", "cveName": "CVE-2024-47068", "score": 6.1, "severity": "Medium", "publishDate": "2024-09-23T16:15:00", "references": ["https://github.com/advisories/GHSA-gcx4-mw62-g8wm", "https://github.com/rollup/rollup/releases/tag/v4.22.4", "https://github.com/rollup/rollup/commit/e2552c9e955e0a61f70f508200ee9f752f85a541", "https://github.com/rollup/rollup/pull/5671"], "referencesData": [{"url": "https://github.com/advisories/GHSA-gcx4-mw62-g8wm", "type": "Advisory", "comment": ""}, {"url": "https://github.com/rollup/rollup/releases/tag/v4.22.4", "type": "Release Note", "comment": ""}, {"url": "https://github.com/rollup/rollup/commit/e2552c9e955e0a61f70f508200ee9f752f85a541", "type": "Commit", "comment": ""}, {"url": "https://github.com/rollup/rollup/pull/5671", "type": "Pull request", "comment": ""}], "description": "Rollup is a module bundler for JavaScript. In rollup versions prior to 2.79.2, 3.x prior to 3.29.5, and 4.x prior to 4.22.4 are susceptible to a DOM Clobbering vulnerability when bundling scripts with properties from \"import.meta\" (e.g., \"import.meta.url\") in \"cjs\"/\"umd\"/\"iife\" format. The DOM Clobbering gadget can lead to cross-site scripting (XSS) in web pages where scriptless attacker-controlled HTML elements (e.g., an \"img\" tag with an unsanitized \"name\" attribute) are present.", "cvss": {"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-rollup-2.78.0", "similarityId": null, "fixResolutionText": "2.79.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-79", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "Cxf6aa1604-c8c2", "cveName": "Cxf6aa1604-c8c2", "score": 9.4, "severity": "Critical", "publishDate": "2024-10-01T07:47:00", "references": ["https://github.com/advisories/GHSA-593m-55hh-j8gv", "https://github.com/getsentry/sentry-javascript/releases/tag/8.33.0", "https://github.com/getsentry/sentry-javascript/pull/13838", "https://github.com/getsentry/sentry-javascript/commit/35bdc87dee3498794e34c1ad35dd9927950c8766"], "referencesData": [{"url": "https://github.com/advisories/GHSA-593m-55hh-j8gv", "type": "Advisory", "comment": ""}, {"url": "https://github.com/getsentry/sentry-javascript/releases/tag/8.33.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/getsentry/sentry-javascript/pull/13838", "type": "Pull request", "comment": ""}, {"url": "https://github.com/getsentry/sentry-javascript/commit/35bdc87dee3498794e34c1ad35dd9927950c8766", "type": "Commit", "comment": ""}], "description": "The Sentry SDK for JavaScript has been identified as having the potential to be exploited in the presence of a Prototype Pollution vulnerability in an application's code or its bundled libraries. This issue affects @sentry/browser versions through 7.119.0 and 8.0.0-alpha.1 through 8.32.0. Note: This does not indicate the presence of a Prototype Pollution within the Sentry SDK itself. Users are strongly advised to first address any Prototype Pollution vulnerabilities in their application, as they pose a more critical security risk.", "cvss": {"score": 9.4, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 9.4, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Npm-@sentry/browser-7.77.0", "similarityId": null, "fixResolutionText": "7.119.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-913", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "bigg-boss-quiz", "_project_name": "inmobi-glance/bigg-boss-quiz"}, {"id": "CVE-2024-23342", "cveName": "CVE-2024-23342", "score": 7.4, "severity": "High", "publishDate": "2024-01-23T00:15:00", "references": ["https://github.com/advisories/GHSA-wj6h-64fc-37mp", "https://github.com/tlsfuzzer/python-ecdsa/blob/0d5a38ca8ada5f2fec67904236f563f562b402d4/src/ecdsa/keys.py#L1539"], "referencesData": [{"url": "https://github.com/advisories/GHSA-wj6h-64fc-37mp", "type": "Advisory", "comment": ""}, {"url": "https://github.com/tlsfuzzer/python-ecdsa/blob/0d5a38ca8ada5f2fec67904236f563f562b402d4/src/ecdsa/keys.py#L1539", "type": "Vulnerable code", "comment": ""}], "description": "The 'ecdsa' PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). All versions are vulnerable to the Minerva attack. As of the time of publication, no known patched version exists.", "cvss": {"score": 7.4, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.4, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-ecdsa-0.19.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-203", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-backend-service", "_project_name": "inmobi-glance/centralai-alchemist-backend-service"}, {"id": "CVE-2024-1135", "cveName": "CVE-2024-1135", "score": 7.5, "severity": "High", "publishDate": "2024-04-16T00:15:00", "references": ["https://github.com/advisories/GHSA-w3h3-4rj7-4ph4", "https://huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1", "https://github.com/benoitc/gunicorn/releases/tag/22.0.0", "https://github.com/benoitc/gunicorn/pull/3113", "https://github.com/benoitc/gunicorn/commit/ac29c9b0a758d21f1e0fb3b3457239e523fa9f1d"], "referencesData": [{"url": "https://github.com/advisories/GHSA-w3h3-4rj7-4ph4", "type": "Advisory", "comment": ""}, {"url": "https://huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/benoitc/gunicorn/releases/tag/22.0.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/benoitc/gunicorn/pull/3113", "type": "Pull request", "comment": ""}, {"url": "https://github.com/benoitc/gunicorn/commit/ac29c9b0a758d21f1e0fb3b3457239e523fa9f1d", "type": "Commit", "comment": ""}], "description": "Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure. This vulnerability affects gunicorn package versions 0.10.0 through 21.2.0.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-gunicorn-20.1.0", "similarityId": null, "fixResolutionText": "22.0.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-444", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-backend-service", "_project_name": "inmobi-glance/centralai-alchemist-backend-service"}, {"id": "CVE-2024-33663", "cveName": "CVE-2024-33663", "score": 9.3, "severity": "Critical", "publishDate": "2024-04-26T00:15:09", "references": ["https://github.com/advisories/GHSA-6c5p-j8vq-pqhj", "https://github.com/mpdavis/python-jose/pull/349", "https://github.com/mpdavis/python-jose/issues/346", "https://github.com/mpdavis/python-jose/commit/12f30c8c87b343ad4f9e27e8b5b9e0ef7d665cb3", "https://github.com/mpdavis/python-jose/releases/tag/3.4.0", "https://github.com/mpdavis/python-jose/pull/369"], "referencesData": [{"url": "https://github.com/advisories/GHSA-6c5p-j8vq-pqhj", "type": "Advisory", "comment": ""}, {"url": "https://github.com/mpdavis/python-jose/pull/349", "type": "Pull request", "comment": ""}, {"url": "https://github.com/mpdavis/python-jose/issues/346", "type": "Issue", "comment": ""}, {"url": "https://github.com/mpdavis/python-jose/commit/12f30c8c87b343ad4f9e27e8b5b9e0ef7d665cb3", "type": "Commit", "comment": ""}, {"url": "https://github.com/mpdavis/python-jose/releases/tag/3.4.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/mpdavis/python-jose/pull/369", "type": "Pull request", "comment": "Additional"}], "description": "The python-jose version prior 3.4.0 to has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-python-jose-3.3.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-327", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-backend-service", "_project_name": "inmobi-glance/centralai-alchemist-backend-service"}, {"id": "CVE-2024-33664", "cveName": "CVE-2024-33664", "score": 5.3, "severity": "Medium", "publishDate": "2024-04-26T00:15:09", "references": ["https://github.com/advisories/GHSA-cjwg-qfpm-7377", "https://github.com/mpdavis/python-jose/issues/344", "https://github.com/mpdavis/python-jose/pull/352", "https://github.com/mpdavis/python-jose/commit/8e1f521a7588dd6bfe553c3d3f320ab7a55bba36"], "referencesData": [{"url": "https://github.com/advisories/GHSA-cjwg-qfpm-7377", "type": "Advisory", "comment": ""}, {"url": "https://github.com/mpdavis/python-jose/issues/344", "type": "Issue", "comment": ""}, {"url": "https://github.com/mpdavis/python-jose/pull/352", "type": "Pull request", "comment": ""}, {"url": "https://github.com/mpdavis/python-jose/commit/8e1f521a7588dd6bfe553c3d3f320ab7a55bba36", "type": "Commit", "comment": ""}], "description": "The package python-jose version 3.3.0 allows attackers to cause a Denial of Service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a \"JWT bomb\".", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-python-jose-3.3.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-backend-service", "_project_name": "inmobi-glance/centralai-alchemist-backend-service"}, {"id": "CVE-2024-45338", "cveName": "CVE-2024-45338", "score": 8.7, "severity": "High", "publishDate": "2024-12-18T21:15:00", "references": ["https://github.com/advisories/GHSA-w32m-9786-jp63", "https://github.com/golang/net/commit/8e66b04771e35c4e4125e8c60334b34e2423effb", "https://github.com/golang/go/issues/70906", "https://pkg.go.dev/vuln/GO-2024-3333"], "referencesData": [{"url": "https://github.com/advisories/GHSA-w32m-9786-jp63", "type": "Advisory", "comment": ""}, {"url": "https://github.com/golang/net/commit/8e66b04771e35c4e4125e8c60334b34e2423effb", "type": "Commit", "comment": ""}, {"url": "https://github.com/golang/go/issues/70906", "type": "Issue", "comment": ""}, {"url": "https://pkg.go.dev/vuln/GO-2024-3333", "type": "Advisory", "comment": ""}], "description": "An attacker can craft an input to the \"Parse\" function, that will be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a Denial of Service. This issue affects github.com/golang/net package versions prior to 0.33.0.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Go-golang.org/x/net-v0.30.0", "similarityId": null, "fixResolutionText": "v0.32.1-0.20241218192430-8e66b04771e3", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-config-server", "_project_name": "inmobi-glance/centralai-alchemist-config-server"}, {"id": "CVE-2024-23342", "cveName": "CVE-2024-23342", "score": 7.4, "severity": "High", "publishDate": "2024-01-23T00:15:00", "references": ["https://github.com/advisories/GHSA-wj6h-64fc-37mp", "https://github.com/tlsfuzzer/python-ecdsa/blob/0d5a38ca8ada5f2fec67904236f563f562b402d4/src/ecdsa/keys.py#L1539"], "referencesData": [{"url": "https://github.com/advisories/GHSA-wj6h-64fc-37mp", "type": "Advisory", "comment": ""}, {"url": "https://github.com/tlsfuzzer/python-ecdsa/blob/0d5a38ca8ada5f2fec67904236f563f562b402d4/src/ecdsa/keys.py#L1539", "type": "Vulnerable code", "comment": ""}], "description": "The 'ecdsa' PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). All versions are vulnerable to the Minerva attack. As of the time of publication, no known patched version exists.", "cvss": {"score": 7.4, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.4, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-ecdsa-0.19.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-203", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-targeting-engine", "_project_name": "inmobi-glance/centralai-alchemist-targeting-engine"}, {"id": "CVE-2023-33953", "cveName": "CVE-2023-33953", "score": 7.5, "severity": "High", "publishDate": "2023-08-09T13:15:00", "references": ["https://github.com/advisories/GHSA-496j-2rq6-j6cc", "https://cloud.google.com/support/bulletins#gcp-2023-022", "https://github.com/grpc/grpc/pull/33656", "https://github.com/grpc/grpc/commit/2788b56867bb36aebdfe567ef1efdbce1799424e", "https://github.com/grpc/grpc/releases/tag/v1.57.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-496j-2rq6-j6cc", "type": "Advisory", "comment": ""}, {"url": "https://cloud.google.com/support/bulletins#gcp-2023-022", "type": "Advisory", "comment": ""}, {"url": "https://github.com/grpc/grpc/pull/33656", "type": "Pull request", "comment": ""}, {"url": "https://github.com/grpc/grpc/commit/2788b56867bb36aebdfe567ef1efdbce1799424e", "type": "Commit", "comment": ""}, {"url": "https://github.com/grpc/grpc/releases/tag/v1.57.0", "type": "Release Note", "comment": ""}], "description": "The package grpc prior to 1.53.2, 1.54.x prior to 1.54.3, 1.55.x prior to 1.55.2, 1.56.x prior to 1.56.2 contains a vulnerability that allows \"hpack\" table accounting errors which could lead to unwanted disconnects between clients and servers in exceptional cases/ Three vectors were found that allow the following DOS (Denial of Service) attacks: - Unbounded memory buffering in the \"HPACK\" parser - Unbounded CPU consumption in the \"HPACK\" parser The unbounded CPU consumption is down to a copy that occurred per-input-block in the parser, and because that could be unbounded due to the memory copy bug we end up with an \"O(n^2)\" parsing loop, with \"n\" selected by the client. The unbounded memory buffering bugs: - The header size limit check was behind the string reading code, so we needed to first buffer up to a 4 gigabyte string before rejecting it as longer than 8 or 16kb. - \"HPACK\" varints have an encoding quirk whereby an infinite number of \"0's\" can be added at the start of an integer. gRPC's \"hpack\" parser needed to read all of them before concluding a parse. - gRPC's metadata overflow check was performed per frame, so that the following sequence of frames could cause infinite buffering: HEADERS: containing a: 1 CONTINUATION: containing a: 2 CONTINUATION: containing a: 3 etc...", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-grpcio-1.44.0", "similarityId": null, "fixResolutionText": "1.58.3", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-targeting-engine", "_project_name": "inmobi-glance/centralai-alchemist-targeting-engine"}, {"id": "CVE-2023-4785", "cveName": "CVE-2023-4785", "score": 7.5, "severity": "High", "publishDate": "2023-09-13T17:15:00", "references": ["https://github.com/advisories/GHSA-p25m-jpj4-qcrr", "https://github.com/grpc/grpc/pull/33656", "https://github.com/grpc/grpc/commit/2788b56867bb36aebdfe567ef1efdbce1799424e"], "referencesData": [{"url": "https://github.com/advisories/GHSA-p25m-jpj4-qcrr", "type": "Advisory", "comment": ""}, {"url": "https://github.com/grpc/grpc/pull/33656", "type": "Pull request", "comment": ""}, {"url": "https://github.com/grpc/grpc/commit/2788b56867bb36aebdfe567ef1efdbce1799424e", "type": "Commit", "comment": ""}], "description": "Lack of error handling in the TCP server in Google's gRPC versions 1.23.0-pre1 through 1.53.1, 1.54.0-pre1 through 1.54.2, 1.55.0-pre1 through 1.55.1 and 1.56.0-pre1 through 1.56.1 on POSIX-compatible platforms (ex. Linux) allows an attacker to cause a denial-of-service (DoS) by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Java, and Go are NOT affected. \n", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-grpcio-1.44.0", "similarityId": null, "fixResolutionText": "1.58.3", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-248", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-targeting-engine", "_project_name": "inmobi-glance/centralai-alchemist-targeting-engine"}, {"id": "CVE-2024-7246", "cveName": "CVE-2024-7246", "score": 6.3, "severity": "Medium", "publishDate": "2024-08-06T11:16:07", "references": ["https://github.com/advisories/GHSA-ghwg-gpp4-w4x3", "https://github.com/grpc/grpc/issues/36245", "https://github.com/grpc/grpc/commit/40debf702ba76395f59618789c627c0f1d9d729a", "https://github.com/grpc/grpc/pull/37359", "https://github.com/grpc/grpc/releases/tag/v1.58.3"], "referencesData": [{"url": "https://github.com/advisories/GHSA-ghwg-gpp4-w4x3", "type": "Advisory", "comment": ""}, {"url": "https://github.com/grpc/grpc/issues/36245", "type": "Issue", "comment": ""}, {"url": "https://github.com/grpc/grpc/commit/40debf702ba76395f59618789c627c0f1d9d729a", "type": "Commit", "comment": ""}, {"url": "https://github.com/grpc/grpc/pull/37359", "type": "Pull request", "comment": ""}, {"url": "https://github.com/grpc/grpc/releases/tag/v1.58.3", "type": "Release Note", "comment": ""}], "description": "A gRPC client communicating with an HTTP/2 proxy to poison the HPACK table between the proxy and the backend, causing other clients to experience failed requests. Additionally, this vulnerability can be exploited to leak other client's HTTP header keys, but not their values.\n\n\n\nThis issue arises because the error status for a misencoded header is not cleared between header reads, leading to subsequent (incrementally indexed) headers in the first request being poisoned until they are cleared from the HPACK table. The vulnerability affects GRPC and GRPCIO versions through v1.58.2, 1.59.0 through v1.59.4, 1.60.0 through v1.60.1, 1.61.0 through 1.61.2, v1.62.0 through v1.62.2, 1.63.0 through v1.63.1, 1.64.0 through v1.64.2, 1.65.0 through v1.65.3 and v1.66.0-pre1.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-grpcio-1.44.0", "similarityId": null, "fixResolutionText": "1.58.3", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-440", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-targeting-engine", "_project_name": "inmobi-glance/centralai-alchemist-targeting-engine"}, {"id": "CVE-2024-33663", "cveName": "CVE-2024-33663", "score": 9.3, "severity": "Critical", "publishDate": "2024-04-26T00:15:09", "references": ["https://github.com/advisories/GHSA-6c5p-j8vq-pqhj", "https://github.com/mpdavis/python-jose/pull/349", "https://github.com/mpdavis/python-jose/issues/346", "https://github.com/mpdavis/python-jose/commit/12f30c8c87b343ad4f9e27e8b5b9e0ef7d665cb3", "https://github.com/mpdavis/python-jose/releases/tag/3.4.0", "https://github.com/mpdavis/python-jose/pull/369"], "referencesData": [{"url": "https://github.com/advisories/GHSA-6c5p-j8vq-pqhj", "type": "Advisory", "comment": ""}, {"url": "https://github.com/mpdavis/python-jose/pull/349", "type": "Pull request", "comment": ""}, {"url": "https://github.com/mpdavis/python-jose/issues/346", "type": "Issue", "comment": ""}, {"url": "https://github.com/mpdavis/python-jose/commit/12f30c8c87b343ad4f9e27e8b5b9e0ef7d665cb3", "type": "Commit", "comment": ""}, {"url": "https://github.com/mpdavis/python-jose/releases/tag/3.4.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/mpdavis/python-jose/pull/369", "type": "Pull request", "comment": "Additional"}], "description": "The python-jose version prior 3.4.0 to has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-python-jose-3.3.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-327", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-targeting-engine", "_project_name": "inmobi-glance/centralai-alchemist-targeting-engine"}, {"id": "CVE-2024-33664", "cveName": "CVE-2024-33664", "score": 5.3, "severity": "Medium", "publishDate": "2024-04-26T00:15:09", "references": ["https://github.com/advisories/GHSA-cjwg-qfpm-7377", "https://github.com/mpdavis/python-jose/issues/344", "https://github.com/mpdavis/python-jose/pull/352", "https://github.com/mpdavis/python-jose/commit/8e1f521a7588dd6bfe553c3d3f320ab7a55bba36"], "referencesData": [{"url": "https://github.com/advisories/GHSA-cjwg-qfpm-7377", "type": "Advisory", "comment": ""}, {"url": "https://github.com/mpdavis/python-jose/issues/344", "type": "Issue", "comment": ""}, {"url": "https://github.com/mpdavis/python-jose/pull/352", "type": "Pull request", "comment": ""}, {"url": "https://github.com/mpdavis/python-jose/commit/8e1f521a7588dd6bfe553c3d3f320ab7a55bba36", "type": "Commit", "comment": ""}], "description": "The package python-jose version 3.3.0 allows attackers to cause a Denial of Service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a \"JWT bomb\".", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-python-jose-3.3.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-targeting-engine", "_project_name": "inmobi-glance/centralai-alchemist-targeting-engine"}, {"id": "CVE-2023-26364", "cveName": "CVE-2023-26364", "score": 5.3, "severity": "Medium", "publishDate": "2023-11-17T00:32:00", "references": ["https://github.com/advisories/GHSA-hpx4-r86g-5jrg", "https://github.com/adobe/css-tools/pull/176", "https://github.com/adobe/css-tools/commit/2b09a25d1dbdbb16fe80065e4c9beb5623ee5793", "https://github.com/adobe/css-tools/blob/main/History.md#431--2023-03-14"], "referencesData": [{"url": "https://github.com/advisories/GHSA-hpx4-r86g-5jrg", "type": "Advisory", "comment": ""}, {"url": "https://github.com/adobe/css-tools/pull/176", "type": "Pull request", "comment": ""}, {"url": "https://github.com/adobe/css-tools/commit/2b09a25d1dbdbb16fe80065e4c9beb5623ee5793", "type": "Commit", "comment": ""}, {"url": "https://github.com/adobe/css-tools/blob/main/History.md#431--2023-03-14", "type": "Release Note", "comment": ""}], "description": "The package @adobe/css-tools in versions prior to 4.3.1 are affected by an Improper Input Validation vulnerability that could result in a minor denial of service while attempting to parse CSS. Exploitation of this issue does not require user interaction or privileges.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-@adobe/css-tools-4.0.1", "similarityId": null, "fixResolutionText": "4.3.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-20", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2023-48631", "cveName": "CVE-2023-48631", "score": 7.5, "severity": "High", "publishDate": "2023-12-13T18:30:00", "references": ["https://github.com/advisories/GHSA-prr3-c3m5-p7q2", "https://github.com/adobe/css-tools/issues/211", "https://github.com/adobe/css-tools/pull/249", "https://github.com/adobe/css-tools/commit/1d90dea8d624359e02d193f159a2697fd6896f45"], "referencesData": [{"url": "https://github.com/advisories/GHSA-prr3-c3m5-p7q2", "type": "Advisory", "comment": ""}, {"url": "https://github.com/adobe/css-tools/issues/211", "type": "Issue", "comment": ""}, {"url": "https://github.com/adobe/css-tools/pull/249", "type": "Pull request", "comment": ""}, {"url": "https://github.com/adobe/css-tools/commit/1d90dea8d624359e02d193f159a2697fd6896f45", "type": "Commit", "comment": ""}], "description": "@adobe/css-tools version prior to 4.3.2 are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-@adobe/css-tools-4.0.1", "similarityId": null, "fixResolutionText": "4.3.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2023-45133", "cveName": "CVE-2023-45133", "score": 8.8, "severity": "High", "publishDate": "2023-10-12T08:23:00", "references": ["https://github.com/advisories/GHSA-67hx-6x53-jw92", "https://github.com/babel/babel/releases/tag/v7.23.2", "https://github.com/babel/babel/pull/16033", "https://github.com/babel/babel/commit/b13376b346946e3f62fc0848c1d2a23223314c82"], "referencesData": [{"url": "https://github.com/advisories/GHSA-67hx-6x53-jw92", "type": "Advisory", "comment": ""}, {"url": "https://github.com/babel/babel/releases/tag/v7.23.2", "type": "Release Note", "comment": ""}, {"url": "https://github.com/babel/babel/pull/16033", "type": "Pull request", "comment": ""}, {"url": "https://github.com/babel/babel/commit/b13376b346946e3f62fc0848c1d2a23223314c82", "type": "Commit", "comment": ""}], "description": "Babel is a compiler for writing JavaScript. In `@babel/traverse` versions prior to 7.23.2 and 8.0.x prior to 8.0.0-alpha.4, using Babel to compile code that was specifically crafted by an attacker can lead to arbitrary code execution during compilation, when using plugins that rely on the `path.evaluate()`or `path.evaluateTruthy()` internal Babel methods. This issue also affects babel-traverse versions through 7.0.0-beta.3. Known affected plugins are `@babel/plugin-transform-runtime`; `@babel/preset-env` when using its `useBuiltIns` option; and any \"polyfill provider\" plugin that depends on `@babel/helper-define-polyfill-provider`, such as `babel-plugin-polyfill-corejs3`, `babel-plugin-polyfill-corejs2`, `babel-plugin-polyfill-es-shims`, `babel-plugin-polyfill-regenerator`. No other plugins under the `@babel/` namespace are impacted, but third-party plugins might be. Users that only compile trusted code are not impacted. Those who cannot upgrade `@babel/traverse` and are using one of the affected packages mentioned above should upgrade them to their latest version to avoid triggering the vulnerable code path in affected `@babel/traverse` versions: `@babel/plugin-transform-runtime` v7.23.2, `@babel/preset-env` v7.23.2, `@babel/helper-define-polyfill-provider` v0.4.3, `babel-plugin-polyfill-corejs2` v0.4.6, `babel-plugin-polyfill-corejs3` v0.8.5, `babel-plugin-polyfill-es-shims` v0.10.0, `babel-plugin-polyfill-regenerator` v0.5.3.", "cvss": {"score": 8.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-@babel/traverse-7.19.0", "similarityId": null, "fixResolutionText": "7.23.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-697", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2023-45133", "cveName": "CVE-2023-45133", "score": 8.8, "severity": "High", "publishDate": "2023-10-12T08:23:00", "references": ["https://github.com/advisories/GHSA-67hx-6x53-jw92", "https://github.com/babel/babel/releases/tag/v7.23.2", "https://github.com/babel/babel/pull/16033", "https://github.com/babel/babel/commit/b13376b346946e3f62fc0848c1d2a23223314c82"], "referencesData": [{"url": "https://github.com/advisories/GHSA-67hx-6x53-jw92", "type": "Advisory", "comment": ""}, {"url": "https://github.com/babel/babel/releases/tag/v7.23.2", "type": "Release Note", "comment": ""}, {"url": "https://github.com/babel/babel/pull/16033", "type": "Pull request", "comment": ""}, {"url": "https://github.com/babel/babel/commit/b13376b346946e3f62fc0848c1d2a23223314c82", "type": "Commit", "comment": ""}], "description": "Babel is a compiler for writing JavaScript. In `@babel/traverse` versions prior to 7.23.2 and 8.0.x prior to 8.0.0-alpha.4, using Babel to compile code that was specifically crafted by an attacker can lead to arbitrary code execution during compilation, when using plugins that rely on the `path.evaluate()`or `path.evaluateTruthy()` internal Babel methods. This issue also affects babel-traverse versions through 7.0.0-beta.3. Known affected plugins are `@babel/plugin-transform-runtime`; `@babel/preset-env` when using its `useBuiltIns` option; and any \"polyfill provider\" plugin that depends on `@babel/helper-define-polyfill-provider`, such as `babel-plugin-polyfill-corejs3`, `babel-plugin-polyfill-corejs2`, `babel-plugin-polyfill-es-shims`, `babel-plugin-polyfill-regenerator`. No other plugins under the `@babel/` namespace are impacted, but third-party plugins might be. Users that only compile trusted code are not impacted. Those who cannot upgrade `@babel/traverse` and are using one of the affected packages mentioned above should upgrade them to their latest version to avoid triggering the vulnerable code path in affected `@babel/traverse` versions: `@babel/plugin-transform-runtime` v7.23.2, `@babel/preset-env` v7.23.2, `@babel/helper-define-polyfill-provider` v0.4.3, `babel-plugin-polyfill-corejs2` v0.4.6, `babel-plugin-polyfill-corejs3` v0.8.5, `babel-plugin-polyfill-es-shims` v0.10.0, `babel-plugin-polyfill-regenerator` v0.5.3.", "cvss": {"score": 8.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-@babel/traverse-7.20.1", "similarityId": null, "fixResolutionText": "7.23.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-697", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "Cxda14f253-4e52", "cveName": "Cxda14f253-4e52", "score": 3.7, "severity": "Low", "publishDate": "2016-04-24T21:00:00", "references": ["https://github.com/petkaantonov/bluebird/issues/1080"], "referencesData": [{"url": "https://github.com/petkaantonov/bluebird/issues/1080", "type": "Issue", "comment": ""}], "description": "The package `bluebird` is vulnerable to memory leak, when running the function longStackTraces() with the flag `--expose_gc`. This causes a significant increase in the memory usage, affecting the server's availability.", "cvss": {"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Npm-bluebird-3.7.2", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-401", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-45590", "cveName": "CVE-2024-45590", "score": 7.5, "severity": "High", "publishDate": "2024-09-10T16:15:00", "references": ["https://github.com/advisories/GHSA-qwcr-r2fm-qrc7", "https://github.com/expressjs/body-parser/commit/b2695c4450f06ba3b0ccf48d872a229bb41c9bce", "https://github.com/expressjs/body-parser/releases/tag/1.20.3"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qwcr-r2fm-qrc7", "type": "Advisory", "comment": ""}, {"url": "https://github.com/expressjs/body-parser/commit/b2695c4450f06ba3b0ccf48d872a229bb41c9bce", "type": "Commit", "comment": ""}, {"url": "https://github.com/expressjs/body-parser/releases/tag/1.20.3", "type": "Release Note", "comment": ""}], "description": "The body-parser is Node.js body parsing middleware. The body-parser package versions prior to 1.20.3 and 2.0.x prior to 2.0.0 are vulnerable to Denial of Service when URL encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in Denial of Service. ", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-body-parser-1.20.0", "similarityId": null, "fixResolutionText": "1.20.3", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-405", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-4068", "cveName": "CVE-2024-4068", "score": 7.5, "severity": "High", "publishDate": "2024-05-14T15:42:48", "references": ["https://advisory.checkmarx.net/advisory/CVE-2024-4068/", "https://github.com/micromatch/braces/issues/35", "https://github.com/advisories/GHSA-grv7-fg5c-xmjg", "https://github.com/micromatch/braces/pull/37", "https://github.com/micromatch/braces/pull/40", "https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff"], "referencesData": [{"url": "https://advisory.checkmarx.net/advisory/CVE-2024-4068/", "type": "Advisory", "comment": ""}, {"url": "https://github.com/micromatch/braces/issues/35", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-grv7-fg5c-xmjg", "type": "Advisory", "comment": ""}, {"url": "https://github.com/micromatch/braces/pull/37", "type": "Pull request", "comment": "Reverted fix"}, {"url": "https://github.com/micromatch/braces/pull/40", "type": "Pull request", "comment": "Fix PR"}, {"url": "https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff", "type": "Commit", "comment": "Lower defaultLength to 10000"}], "description": "The NPM package \"braces\", versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In \"lib/parse.js,\" if a malicious user sends \"imbalanced braces\" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-braces-3.0.2", "similarityId": null, "fixResolutionText": "3.0.3", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1050", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-47764", "cveName": "CVE-2024-47764", "score": 5.3, "severity": "Medium", "publishDate": "2024-10-04T20:15:00", "references": ["https://github.com/advisories/GHSA-pxg6-pf52-xh8x", "https://github.com/jshttp/cookie/commit/e10042845354fea83bd8f34af72475eed1dadf5c", "https://github.com/jshttp/cookie/pull/167", "https://github.com/jshttp/cookie/releases/tag/v0.7.0", "https://github.com/jshttp/cookie/issues/165"], "referencesData": [{"url": "https://github.com/advisories/GHSA-pxg6-pf52-xh8x", "type": "Advisory", "comment": ""}, {"url": "https://github.com/jshttp/cookie/commit/e10042845354fea83bd8f34af72475eed1dadf5c", "type": "Commit", "comment": ""}, {"url": "https://github.com/jshttp/cookie/pull/167", "type": "Pull request", "comment": ""}, {"url": "https://github.com/jshttp/cookie/releases/tag/v0.7.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/jshttp/cookie/issues/165", "type": "Issue", "comment": ""}], "description": "The NPM package cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for \"path\" and \"domain\", which could be abused to alter other fields of the cookie. This vulnerability affects cookie package versions prior to 0.7.0. Users are advised to upgrade to a fixed version, which updates the validation for \"name\", \"path\", and \"domain\".", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-cookie-0.5.0", "similarityId": null, "fixResolutionText": "0.7.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-74", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-21538", "cveName": "CVE-2024-21538", "score": 7.7, "severity": "High", "publishDate": "2024-11-08T05:15:06", "references": ["https://github.com/advisories/GHSA-3xgq-45jj-v275", "https://github.com/moxystudio/node-cross-spawn/issues/165", "https://github.com/moxystudio/node-cross-spawn/pull/160", "https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff", "https://github.com/moxystudio/node-cross-spawn/issues/163", "https://github.com/moxystudio/node-cross-spawn/pull/162", "https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f", "https://github.com/moxystudio/node-cross-spawn/blob/v7.0.5/CHANGELOG.md"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "type": "Advisory", "comment": ""}, {"url": "https://github.com/moxystudio/node-cross-spawn/issues/165", "type": "Issue", "comment": ""}, {"url": "https://github.com/moxystudio/node-cross-spawn/pull/160", "type": "Pull request", "comment": "Initial PR"}, {"url": "https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff", "type": "Commit", "comment": "Initial fix"}, {"url": "https://github.com/moxystudio/node-cross-spawn/issues/163", "type": "Issue", "comment": ""}, {"url": "https://github.com/moxystudio/node-cross-spawn/pull/162", "type": "Pull request", "comment": "Additional PR"}, {"url": "https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f", "type": "Commit", "comment": "Additional fix"}, {"url": "https://github.com/moxystudio/node-cross-spawn/blob/v7.0.5/CHANGELOG.md", "type": "Release Note", "comment": ""}], "description": "Versions of the package cross-spawn prior to 6.0.6 and 7.x prior to 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS), due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-cross-spawn-7.0.3", "similarityId": null, "fixResolutionText": "7.0.5", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "Cx3b412226-50de", "cveName": "Cx3b412226-50de", "score": 7.5, "severity": "High", "publishDate": "2021-02-18T06:15:00", "references": ["https://github.com/advisories/GHSA-36jr-mh4h-2g58", "https://github.com/d3/d3-color/pull/100", "https://github.com/d3/d3-color/commit/994d8fd95181484a5a27c5edc919aa625781432d", "https://github.com/d3/d3-color/releases/tag/v3.1.0", "https://github.com/d3/d3-color/issues/97"], "referencesData": [{"url": "https://github.com/advisories/GHSA-36jr-mh4h-2g58", "type": "Advisory", "comment": ""}, {"url": "https://github.com/d3/d3-color/pull/100", "type": "Pull request", "comment": ""}, {"url": "https://github.com/d3/d3-color/commit/994d8fd95181484a5a27c5edc919aa625781432d", "type": "Commit", "comment": ""}, {"url": "https://github.com/d3/d3-color/releases/tag/v3.1.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/d3/d3-color/issues/97", "type": "Issue", "comment": ""}], "description": "The d3-color module provides representations for various color spaces in the browser. d3-color versions prior to 3.1.0 are vulnerable to a Regular expression Denial of Service.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-d3-color-2.0.0", "similarityId": null, "fixResolutionText": "3.1.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "Cx8bc4df28-fcf5", "cveName": "Cx8bc4df28-fcf5", "score": 3.7, "severity": "Low", "publishDate": "2020-12-10T17:14:00", "references": ["https://github.com/debug-js/debug/issues/737", "https://github.com/debug-js/debug/issues/656", "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "https://github.com/debug-js/debug/releases/tag/4.4.0"], "referencesData": [{"url": "https://github.com/debug-js/debug/issues/737", "type": "Issue", "comment": ""}, {"url": "https://github.com/debug-js/debug/issues/656", "type": "Other", "comment": "Roadmap that mentions Issue"}, {"url": "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "type": "POC/Exploit", "comment": ""}, {"url": "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "type": "Commit", "comment": ""}, {"url": "https://github.com/debug-js/debug/releases/tag/4.4.0", "type": "Release Note", "comment": ""}], "description": "In NPM \"debug\" versions prior to 4.4.0, the \"enable\" function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.", "cvss": {"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Npm-debug-2.6.9", "similarityId": null, "fixResolutionText": "4.4.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "Cx8bc4df28-fcf5", "cveName": "Cx8bc4df28-fcf5", "score": 3.7, "severity": "Low", "publishDate": "2020-12-10T17:14:00", "references": ["https://github.com/debug-js/debug/issues/737", "https://github.com/debug-js/debug/issues/656", "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "https://github.com/debug-js/debug/releases/tag/4.4.0"], "referencesData": [{"url": "https://github.com/debug-js/debug/issues/737", "type": "Issue", "comment": ""}, {"url": "https://github.com/debug-js/debug/issues/656", "type": "Other", "comment": "Roadmap that mentions Issue"}, {"url": "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "type": "POC/Exploit", "comment": ""}, {"url": "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "type": "Commit", "comment": ""}, {"url": "https://github.com/debug-js/debug/releases/tag/4.4.0", "type": "Release Note", "comment": ""}], "description": "In NPM \"debug\" versions prior to 4.4.0, the \"enable\" function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.", "cvss": {"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Npm-debug-3.2.7", "similarityId": null, "fixResolutionText": "4.4.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "Cx8bc4df28-fcf5", "cveName": "Cx8bc4df28-fcf5", "score": 3.7, "severity": "Low", "publishDate": "2020-12-10T17:14:00", "references": ["https://github.com/debug-js/debug/issues/737", "https://github.com/debug-js/debug/issues/656", "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "https://github.com/debug-js/debug/releases/tag/4.4.0"], "referencesData": [{"url": "https://github.com/debug-js/debug/issues/737", "type": "Issue", "comment": ""}, {"url": "https://github.com/debug-js/debug/issues/656", "type": "Other", "comment": "Roadmap that mentions Issue"}, {"url": "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "type": "POC/Exploit", "comment": ""}, {"url": "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "type": "Commit", "comment": ""}, {"url": "https://github.com/debug-js/debug/releases/tag/4.4.0", "type": "Release Note", "comment": ""}], "description": "In NPM \"debug\" versions prior to 4.4.0, the \"enable\" function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.", "cvss": {"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Npm-debug-4.3.4", "similarityId": null, "fixResolutionText": "4.4.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "Cx8bc4df28-fcf5", "cveName": "Cx8bc4df28-fcf5", "score": 3.7, "severity": "Low", "publishDate": "2020-12-10T17:14:00", "references": ["https://github.com/debug-js/debug/issues/737", "https://github.com/debug-js/debug/issues/656", "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "https://github.com/debug-js/debug/releases/tag/4.4.0"], "referencesData": [{"url": "https://github.com/debug-js/debug/issues/737", "type": "Issue", "comment": ""}, {"url": "https://github.com/debug-js/debug/issues/656", "type": "Other", "comment": "Roadmap that mentions Issue"}, {"url": "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "type": "POC/Exploit", "comment": ""}, {"url": "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "type": "Commit", "comment": ""}, {"url": "https://github.com/debug-js/debug/releases/tag/4.4.0", "type": "Release Note", "comment": ""}], "description": "In NPM \"debug\" versions prior to 4.4.0, the \"enable\" function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.", "cvss": {"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Npm-debug-4.3.7", "similarityId": null, "fixResolutionText": "4.4.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-33883", "cveName": "CVE-2024-33883", "score": 7.3, "severity": "High", "publishDate": "2024-04-28T16:15:00", "references": ["https://github.com/advisories/GHSA-ghr5-ch3p-vcr6", "https://github.com/mde/ejs/commit/e469741dca7df2eb400199e1cdb74621e3f89aa5"], "referencesData": [{"url": "https://github.com/advisories/GHSA-ghr5-ch3p-vcr6", "type": "Advisory", "comment": ""}, {"url": "https://github.com/mde/ejs/commit/e469741dca7df2eb400199e1cdb74621e3f89aa5", "type": "Commit", "comment": ""}], "description": "The ejs (aka Embedded JavaScript templates) package versions prior to 3.1.10 for Node.js lacks certain pollution protection.", "cvss": {"score": 7.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-ejs-3.1.8", "similarityId": null, "fixResolutionText": "3.1.10", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1321", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-29041", "cveName": "CVE-2024-29041", "score": 6.1, "severity": "Medium", "publishDate": "2024-03-25T21:15:46", "references": ["https://github.com/advisories/GHSA-rv95-896h-c2vc", "https://github.com/expressjs/express/releases/tag/4.19.2", "https://github.com/expressjs/express/pull/5551", "https://github.com/expressjs/express/commit/0867302ddbde0e9463d0564fea5861feb708c2dd", "https://github.com/expressjs/express/pull/5561", "https://github.com/expressjs/express/commit/0b746953c4bd8e377123527db11f9cd866e39f94"], "referencesData": [{"url": "https://github.com/advisories/GHSA-rv95-896h-c2vc", "type": "Advisory", "comment": ""}, {"url": "https://github.com/expressjs/express/releases/tag/4.19.2", "type": "Release Note", "comment": ""}, {"url": "https://github.com/expressjs/express/pull/5551", "type": "Pull request", "comment": ""}, {"url": "https://github.com/expressjs/express/commit/0867302ddbde0e9463d0564fea5861feb708c2dd", "type": "Commit", "comment": "Initial fix"}, {"url": "https://github.com/expressjs/express/pull/5561", "type": "Pull request", "comment": ""}, {"url": "https://github.com/expressjs/express/commit/0b746953c4bd8e377123527db11f9cd866e39f94", "type": "Commit", "comment": "Additional fix"}], "description": "Express.js minimalist web framework for node. Express.js versions prior to 4.19.2, and 5.0.x prior to 5.0.0-beta.3 are affected by an open redirect vulnerability using malformed URLs. When a user of Express performs a redirect using a user-provided URL Express performs an encode using \"encodeurl\" on the contents before passing it to the \"location\" header. This can cause malformed URLs to be evaluated in unexpected ways by common redirect allow list implementations in Express applications, leading to an Open Redirect via bypass of a properly implemented allow list. The main method impacted is \"res.location()\" but this is also called from within \"res.redirect()\".", "cvss": {"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-express-4.18.1", "similarityId": null, "fixResolutionText": "4.20.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-601", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-43796", "cveName": "CVE-2024-43796", "score": 4.7, "severity": "Medium", "publishDate": "2024-09-10T15:15:00", "references": ["https://github.com/advisories/GHSA-qw6h-vgh9-j6wx", "https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553", "https://github.com/expressjs/express/releases/tag/4.20.0", "https://github.com/expressjs/express/pull/5785"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qw6h-vgh9-j6wx", "type": "Advisory", "comment": ""}, {"url": "https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553", "type": "Commit", "comment": ""}, {"url": "https://github.com/expressjs/express/releases/tag/4.20.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/expressjs/express/pull/5785", "type": "Pull request", "comment": ""}], "description": "Express.js minimalist web framework for node. In express versions prior to 4.20.0 and 5.0.x prior to 5.0.0, passing untrusted user input even after sanitizing it to \"response.redirect()\" may execute untrusted code.", "cvss": {"score": 4.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-express-4.18.1", "similarityId": null, "fixResolutionText": "4.20.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-79", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2023-26159", "cveName": "CVE-2023-26159", "score": 6.1, "severity": "Medium", "publishDate": "2024-01-02T05:15:00", "references": ["https://github.com/advisories/GHSA-jchw-25xp-jwwc", "https://github.com/follow-redirects/follow-redirects/issues/235", "https://github.com/follow-redirects/follow-redirects/pull/236", "https://github.com/follow-redirects/follow-redirects/commit/7a6567e16dfa9ad18a70bfe91784c28653fbf19d"], "referencesData": [{"url": "https://github.com/advisories/GHSA-jchw-25xp-jwwc", "type": "Advisory", "comment": ""}, {"url": "https://github.com/follow-redirects/follow-redirects/issues/235", "type": "Issue", "comment": ""}, {"url": "https://github.com/follow-redirects/follow-redirects/pull/236", "type": "Pull request", "comment": ""}, {"url": "https://github.com/follow-redirects/follow-redirects/commit/7a6567e16dfa9ad18a70bfe91784c28653fbf19d", "type": "Commit", "comment": ""}], "description": "The package follow-redirects versions prior to 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the \"url.parse()\" function. When a new \"URL()\" throws an error, it can be manipulated to misinterpret the hostname. An attacker could exploit this weakness to redirect traffic to a malicious site, potentially leading to information disclosure, phishing attacks, or other security breaches.", "cvss": {"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-follow-redirects-1.15.1", "similarityId": null, "fixResolutionText": "1.15.6", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-601", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-28849", "cveName": "CVE-2024-28849", "score": 6.5, "severity": "Medium", "publishDate": "2024-03-14T17:15:52", "references": ["https://github.com/advisories/GHSA-cxjh-pqwp-8mfp", "https://github.com/follow-redirects/follow-redirects/commit/c4f847f85176991f95ab9c88af63b1294de8649b", "https://bugzilla.redhat.com/show_bug.cgi?id=2269576"], "referencesData": [{"url": "https://github.com/advisories/GHSA-cxjh-pqwp-8mfp", "type": "Advisory", "comment": ""}, {"url": "https://github.com/follow-redirects/follow-redirects/commit/c4f847f85176991f95ab9c88af63b1294de8649b", "type": "Commit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2269576", "type": "Issue", "comment": ""}], "description": "follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. In affected versions follow-redirects only clears authorization header during cross-domain redirect, but keep the proxy-authentication header which contains credentials too. This vulnerability may lead to credentials leak. This issue affects follow-redirects versions prior to 1.15.6. Users are advised to upgrade. There are no known workarounds for this vulnerability.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-follow-redirects-1.15.1", "similarityId": null, "fixResolutionText": "1.15.6", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-200", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-21536", "cveName": "CVE-2024-21536", "score": 7.5, "severity": "High", "publishDate": "2024-10-19T05:15:00", "references": ["https://github.com/advisories/GHSA-c7qv-q95q-8v27", "https://github.com/chimurai/http-proxy-middleware/releases/tag/v3.0.3", "https://github.com/chimurai/http-proxy-middleware/commit/788b21e4aff38332d6319557d4a5b1b13b1f9a22", "https://github.com/chimurai/http-proxy-middleware/pull/1043", "https://gist.github.com/mhassan1/28be67266d82a53708ed59ce5dc3c94a"], "referencesData": [{"url": "https://github.com/advisories/GHSA-c7qv-q95q-8v27", "type": "Advisory", "comment": ""}, {"url": "https://github.com/chimurai/http-proxy-middleware/releases/tag/v3.0.3", "type": "Release Note", "comment": ""}, {"url": "https://github.com/chimurai/http-proxy-middleware/commit/788b21e4aff38332d6319557d4a5b1b13b1f9a22", "type": "Commit", "comment": ""}, {"url": "https://github.com/chimurai/http-proxy-middleware/pull/1043", "type": "Pull request", "comment": ""}, {"url": "https://gist.github.com/mhassan1/28be67266d82a53708ed59ce5dc3c94a", "type": "Disclosure", "comment": ""}], "description": "The http-proxy-middleware versions through 2.0.7-beta.0 and 3.0.0-beta.0 through 3.0.2 are vulnerable to Denial of Service (DoS) due to an \"UnhandledPromiseRejection\" error thrown by \"micromatch\". An attacker could kill the Node.js process and crash the server by making requests to certain paths.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-http-proxy-middleware-2.0.6", "similarityId": null, "fixResolutionText": "2.0.7", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "Cxdca8e59f-8bfe", "cveName": "Cxdca8e59f-8bfe", "score": 7.5, "severity": "High", "publishDate": "2020-12-07T10:10:00", "references": ["https://github.com/npm/inflight/issues/5"], "referencesData": [{"url": "https://github.com/npm/inflight/issues/5", "type": "Issue", "comment": ""}], "description": "In NPM `inflight` there is a Memory Leak because some resources are not freed correctly after being used. It appears to affect all versions, as the issue was not addressed and no fix is found. NOTE: In the meantime, `logdna-agent`, a package that depends on `inflight`, has merged a commit to address this solely in their package (so it should be fixed in `logdna-agent` in versions 1.6.5 and later). `Node-glob`, a package that also depends on `inflight`, was also planning to address this by not using `inflight` after version 8 is released, but it is still being used.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-inflight-1.0.6", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-772", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2022-46175", "cveName": "CVE-2022-46175", "score": 8.8, "severity": "High", "publishDate": "2022-12-24T17:15:00", "references": ["https://github.com/advisories/GHSA-9c47-m6qq-7p4h", "https://github.com/json5/json5/security/advisories/GHSA-9c47-m6qq-7p4h", "https://github.com/json5/json5/issues/295", "https://github.com/github/advisory-database/pull/1541", "https://github.com/json5/json5/commit/7774c1097993bc3ce9f0ac4b722a32bf7d6871c8", "https://github.com/json5/json5/releases/tag/v2.2.2"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9c47-m6qq-7p4h", "type": "Advisory", "comment": ""}, {"url": "https://github.com/json5/json5/security/advisories/GHSA-9c47-m6qq-7p4h", "type": "Advisory", "comment": ""}, {"url": "https://github.com/json5/json5/issues/295", "type": "Issue", "comment": ""}, {"url": "https://github.com/github/advisory-database/pull/1541", "type": "Pull request", "comment": ""}, {"url": "https://github.com/json5/json5/commit/7774c1097993bc3ce9f0ac4b722a32bf7d6871c8", "type": "Commit", "comment": ""}, {"url": "https://github.com/json5/json5/releases/tag/v2.2.2", "type": "Release Note", "comment": ""}], "description": "JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g. for config files). The `parse` method of the JSON5 library version through 1.0.1 and 2.0.x through 2.2.1 does not restrict parsing of keys named `__proto__`, allowing specially crafted strings to pollute the prototype of the resulting object. This vulnerability pollutes the prototype of the object returned by `JSON5.parse` and not the global Object prototype, which is the commonly understood definition of Prototype Pollution. However, polluting the prototype of a single object can have a significant security impact for an application if the object is later used in trusted operations. This vulnerability could allow an attacker to set arbitrary and unexpected keys on the object returned from `JSON5.parse`. The actual impact will depend on how applications utilize the returned object and how they filter unwanted keys, but could include denial of service, cross-site scripting, the elevation of privilege, and in extreme cases, remote code execution. `JSON5.parse` should restrict parsing of `__proto__` keys when parsing JSON strings to objects. As a point of reference, the `JSON.parse` method included in JavaScript ignores `__proto__` keys. Simply changing `JSON5.parse` to `JSON.parse` in the examples above mitigates this vulnerability.", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-json5-1.0.1", "similarityId": null, "fixResolutionText": "1.0.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1321", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2022-46175", "cveName": "CVE-2022-46175", "score": 8.8, "severity": "High", "publishDate": "2022-12-24T17:15:00", "references": ["https://github.com/advisories/GHSA-9c47-m6qq-7p4h", "https://github.com/json5/json5/security/advisories/GHSA-9c47-m6qq-7p4h", "https://github.com/json5/json5/issues/295", "https://github.com/github/advisory-database/pull/1541", "https://github.com/json5/json5/commit/7774c1097993bc3ce9f0ac4b722a32bf7d6871c8", "https://github.com/json5/json5/releases/tag/v2.2.2"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9c47-m6qq-7p4h", "type": "Advisory", "comment": ""}, {"url": "https://github.com/json5/json5/security/advisories/GHSA-9c47-m6qq-7p4h", "type": "Advisory", "comment": ""}, {"url": "https://github.com/json5/json5/issues/295", "type": "Issue", "comment": ""}, {"url": "https://github.com/github/advisory-database/pull/1541", "type": "Pull request", "comment": ""}, {"url": "https://github.com/json5/json5/commit/7774c1097993bc3ce9f0ac4b722a32bf7d6871c8", "type": "Commit", "comment": ""}, {"url": "https://github.com/json5/json5/releases/tag/v2.2.2", "type": "Release Note", "comment": ""}], "description": "JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g. for config files). The `parse` method of the JSON5 library version through 1.0.1 and 2.0.x through 2.2.1 does not restrict parsing of keys named `__proto__`, allowing specially crafted strings to pollute the prototype of the resulting object. This vulnerability pollutes the prototype of the object returned by `JSON5.parse` and not the global Object prototype, which is the commonly understood definition of Prototype Pollution. However, polluting the prototype of a single object can have a significant security impact for an application if the object is later used in trusted operations. This vulnerability could allow an attacker to set arbitrary and unexpected keys on the object returned from `JSON5.parse`. The actual impact will depend on how applications utilize the returned object and how they filter unwanted keys, but could include denial of service, cross-site scripting, the elevation of privilege, and in extreme cases, remote code execution. `JSON5.parse` should restrict parsing of `__proto__` keys when parsing JSON strings to objects. As a point of reference, the `JSON.parse` method included in JavaScript ignores `__proto__` keys. Simply changing `JSON5.parse` to `JSON.parse` in the examples above mitigates this vulnerability.", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-json5-2.2.1", "similarityId": null, "fixResolutionText": "2.2.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1321", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2022-37599", "cveName": "CVE-2022-37599", "score": 7.5, "severity": "High", "publishDate": "2022-10-11T19:15:00", "references": ["https://github.com/webpack/loader-utils/issues/211", "https://github.com/advisories/GHSA-hhq3-ff78-jv3g", "https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb", "https://github.com/webpack/loader-utils/releases/tag/v2.0.4", "https://github.com/webpack/loader-utils/pull/225", "https://github.com/webpack/loader-utils/issues/216"], "referencesData": [{"url": "https://github.com/webpack/loader-utils/issues/211", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-hhq3-ff78-jv3g", "type": "Advisory", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb", "type": "Commit", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/releases/tag/v2.0.4", "type": "Release Note", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/pull/225", "type": "Pull request", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/issues/216", "type": "Issue", "comment": ""}], "description": "A Regular expression Denial of Service (ReDoS) flaw was found in loader-utils versions 1.0.0 through 1.4.1, 2.0.0 through 2.0.3, and 3.0.0 through 3.2.0. The affected function is \"interpolateName\" in the \"interpolateName.js\" file via the \"resourcePath\" variable.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-loader-utils-2.0.2", "similarityId": null, "fixResolutionText": "2.0.4", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2022-37601", "cveName": "CVE-2022-37601", "score": 9.8, "severity": "Critical", "publishDate": "2022-10-12T20:15:00", "references": ["https://github.com/advisories/GHSA-76p3-8jx3-jpfq", "https://github.com/webpack/loader-utils/issues/212", "https://github.com/webpack/loader-utils/pull/217", "https://github.com/webpack/loader-utils/commit/a93cf6f4702012030f6b5ee8340d5c95ec1c7d4c", "https://github.com/webpack/loader-utils/releases/tag/v2.0.3"], "referencesData": [{"url": "https://github.com/advisories/GHSA-76p3-8jx3-jpfq", "type": "Advisory", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/issues/212", "type": "Issue", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/pull/217", "type": "Pull request", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/commit/a93cf6f4702012030f6b5ee8340d5c95ec1c7d4c", "type": "Commit", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/releases/tag/v2.0.3", "type": "Release Note", "comment": ""}], "description": "Prototype Pollution Vulnerability present in the loader-utils package in the function 'parseQuery()' of 'parseQuery.js' file via the 'name' variable. This vulnerability affects versions prior to 1.4.1 and 2.0.x prior to 2.0.3.", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Npm-loader-utils-2.0.2", "similarityId": null, "fixResolutionText": "2.0.4", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1321", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2022-37603", "cveName": "CVE-2022-37603", "score": 7.5, "severity": "High", "publishDate": "2022-10-14T16:15:00", "references": ["https://github.com/advisories/GHSA-3rfm-jhwj-7488", "https://github.com/webpack/loader-utils/issues/213", "https://github.com/webpack/loader-utils/pull/225", "https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb", "https://github.com/webpack/loader-utils/releases/tag/v2.0.4"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3rfm-jhwj-7488", "type": "Advisory", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/issues/213", "type": "Issue", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/pull/225", "type": "Pull request", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb", "type": "Commit", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/releases/tag/v2.0.4", "type": "Release Note", "comment": ""}], "description": "A Regular expression Denial of Service (ReDoS) flaw was found in loader-utils versions 1.0.0 through 1.4.1, 2.0.0 through 2.0.3, and 3.0.0 through 3.2.0. The affected function is \"interpolateName\" in the \"interpolateName.js\" file via the \"url\" variable. ", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-loader-utils-2.0.2", "similarityId": null, "fixResolutionText": "2.0.4", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2022-37599", "cveName": "CVE-2022-37599", "score": 7.5, "severity": "High", "publishDate": "2022-10-11T19:15:00", "references": ["https://github.com/webpack/loader-utils/issues/211", "https://github.com/advisories/GHSA-hhq3-ff78-jv3g", "https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb", "https://github.com/webpack/loader-utils/releases/tag/v2.0.4", "https://github.com/webpack/loader-utils/pull/225", "https://github.com/webpack/loader-utils/issues/216"], "referencesData": [{"url": "https://github.com/webpack/loader-utils/issues/211", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-hhq3-ff78-jv3g", "type": "Advisory", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb", "type": "Commit", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/releases/tag/v2.0.4", "type": "Release Note", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/pull/225", "type": "Pull request", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/issues/216", "type": "Issue", "comment": ""}], "description": "A Regular expression Denial of Service (ReDoS) flaw was found in loader-utils versions 1.0.0 through 1.4.1, 2.0.0 through 2.0.3, and 3.0.0 through 3.2.0. The affected function is \"interpolateName\" in the \"interpolateName.js\" file via the \"resourcePath\" variable.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-loader-utils-3.2.0", "similarityId": null, "fixResolutionText": "3.2.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2022-37603", "cveName": "CVE-2022-37603", "score": 7.5, "severity": "High", "publishDate": "2022-10-14T16:15:00", "references": ["https://github.com/advisories/GHSA-3rfm-jhwj-7488", "https://github.com/webpack/loader-utils/issues/213", "https://github.com/webpack/loader-utils/pull/225", "https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb", "https://github.com/webpack/loader-utils/releases/tag/v2.0.4"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3rfm-jhwj-7488", "type": "Advisory", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/issues/213", "type": "Issue", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/pull/225", "type": "Pull request", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb", "type": "Commit", "comment": ""}, {"url": "https://github.com/webpack/loader-utils/releases/tag/v2.0.4", "type": "Release Note", "comment": ""}], "description": "A Regular expression Denial of Service (ReDoS) flaw was found in loader-utils versions 1.0.0 through 1.4.1, 2.0.0 through 2.0.3, and 3.0.0 through 3.2.0. The affected function is \"interpolateName\" in the \"interpolateName.js\" file via the \"url\" variable. ", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-loader-utils-3.2.0", "similarityId": null, "fixResolutionText": "3.2.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-4067", "cveName": "CVE-2024-4067", "score": 5.3, "severity": "Medium", "publishDate": "2024-05-14T15:42:47", "references": ["https://advisory.checkmarx.net/advisory/CVE-2024-4067/", "https://github.com/micromatch/micromatch/pull/266", "https://github.com/micromatch/micromatch/commit/03aa8052171e878897eee5d7bb2ae0ae83ec2ade", "https://github.com/micromatch/micromatch/releases/tag/4.0.8", "https://github.com/advisories/GHSA-952p-6rrq-rcjv"], "referencesData": [{"url": "https://advisory.checkmarx.net/advisory/CVE-2024-4067/", "type": "Advisory", "comment": ""}, {"url": "https://github.com/micromatch/micromatch/pull/266", "type": "Pull request", "comment": ""}, {"url": "https://github.com/micromatch/micromatch/commit/03aa8052171e878897eee5d7bb2ae0ae83ec2ade", "type": "Commit", "comment": ""}, {"url": "https://github.com/micromatch/micromatch/releases/tag/4.0.8", "type": "Release Note", "comment": ""}, {"url": "https://github.com/advisories/GHSA-952p-6rrq-rcjv", "type": "Advisory", "comment": "GHSA"}], "description": "The NPM package \"micromatch\" prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in \"micromatch.braces()\" in \"index.js\" because the pattern \".*\" will greedily match anything. By passing a malicious payload, the pattern matching will keep backtracking to the input while it doesn't find the closing bracket. As the input size increases, the consumption time will also increase until it causes the application to hang or slow down. There was a merged fix but further testing shows the issue still persists. This issue should be mitigated by using a safe pattern that won't start backtracking the regular expression due to its greedy matching.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-micromatch-4.0.5", "similarityId": null, "fixResolutionText": "4.0.8", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2022-3517", "cveName": "CVE-2022-3517", "score": 7.5, "severity": "High", "publishDate": "2022-10-17T20:15:00", "references": ["https://github.com/advisories/GHSA-f8q6-p94x-37v3", "https://github.com/isaacs/minimatch/commit/a8763f4388e51956be62dc6025cec1126beeb5e6"], "referencesData": [{"url": "https://github.com/advisories/GHSA-f8q6-p94x-37v3", "type": "Advisory", "comment": ""}, {"url": "https://github.com/isaacs/minimatch/commit/a8763f4388e51956be62dc6025cec1126beeb5e6", "type": "Commit", "comment": ""}], "description": "A vulnerability was found in the minimatch package versions prior to 3.0.5. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the \"braceExpand\" function with specific arguments, resulting in a Denial of Service.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-minimatch-3.0.4", "similarityId": null, "fixResolutionText": "3.0.5", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-55565", "cveName": "CVE-2024-55565", "score": 6.3, "severity": "Medium", "publishDate": "2024-12-09T02:15:00", "references": ["https://github.com/advisories/GHSA-mwcw-c2x4-8c55", "https://github.com/ai/nanoid/pull/510", "https://github.com/ai/nanoid/commit/d643045f40d6dc8afa000a644d857da1436ed08c", "https://github.com/ai/nanoid/releases/tag/5.0.9"], "referencesData": [{"url": "https://github.com/advisories/GHSA-mwcw-c2x4-8c55", "type": "Advisory", "comment": ""}, {"url": "https://github.com/ai/nanoid/pull/510", "type": "Pull request", "comment": ""}, {"url": "https://github.com/ai/nanoid/commit/d643045f40d6dc8afa000a644d857da1436ed08c", "type": "Commit", "comment": ""}, {"url": "https://github.com/ai/nanoid/releases/tag/5.0.9", "type": "Release Note", "comment": ""}], "description": "The package nanoid versions through 3.3.7 and 4.0.0 through 5.0.8 mishandle non-integer values. ", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Npm-nanoid-3.3.4", "similarityId": null, "fixResolutionText": "3.3.8", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-835", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-55565", "cveName": "CVE-2024-55565", "score": 6.3, "severity": "Medium", "publishDate": "2024-12-09T02:15:00", "references": ["https://github.com/advisories/GHSA-mwcw-c2x4-8c55", "https://github.com/ai/nanoid/pull/510", "https://github.com/ai/nanoid/commit/d643045f40d6dc8afa000a644d857da1436ed08c", "https://github.com/ai/nanoid/releases/tag/5.0.9"], "referencesData": [{"url": "https://github.com/advisories/GHSA-mwcw-c2x4-8c55", "type": "Advisory", "comment": ""}, {"url": "https://github.com/ai/nanoid/pull/510", "type": "Pull request", "comment": ""}, {"url": "https://github.com/ai/nanoid/commit/d643045f40d6dc8afa000a644d857da1436ed08c", "type": "Commit", "comment": ""}, {"url": "https://github.com/ai/nanoid/releases/tag/5.0.9", "type": "Release Note", "comment": ""}], "description": "The package nanoid versions through 3.3.7 and 4.0.0 through 5.0.8 mishandle non-integer values. ", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Npm-nanoid-3.3.7", "similarityId": null, "fixResolutionText": "3.3.8", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-835", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2021-3803", "cveName": "CVE-2021-3803", "score": 7.5, "severity": "High", "publishDate": "2021-09-17T07:15:00", "references": ["https://github.com/advisories/GHSA-rp65-9cf3-cjxr", "https://github.com/fb55/nth-check/pull/9", "https://github.com/fb55/nth-check/commit/9894c1d2010870c351f66c6f6efcf656e26bb726", "https://huntr.dev/bounties/8cf8cc06-d2cf-4b4e-b42c-99fafb0b04d0/"], "referencesData": [{"url": "https://github.com/advisories/GHSA-rp65-9cf3-cjxr", "type": "Advisory", "comment": ""}, {"url": "https://github.com/fb55/nth-check/pull/9", "type": "Pull request", "comment": ""}, {"url": "https://github.com/fb55/nth-check/commit/9894c1d2010870c351f66c6f6efcf656e26bb726", "type": "Commit", "comment": ""}, {"url": "https://huntr.dev/bounties/8cf8cc06-d2cf-4b4e-b42c-99fafb0b04d0/", "type": "POC/Exploit", "comment": ""}], "description": "nth-check prior to 2.0.1 is vulnerable to Inefficient Regular Expression Complexity", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-nth-check-1.0.2", "similarityId": null, "fixResolutionText": "2.0.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-45296", "cveName": "CVE-2024-45296", "score": 7.5, "severity": "High", "publishDate": "2024-09-09T19:15:00", "references": ["https://github.com/advisories/GHSA-9wv6-86v2-598j", "https://github.com/pillarjs/path-to-regexp/commit/d31670ae8f6e69cbfd56e835742195b7d10942ef", "https://github.com/pillarjs/path-to-regexp/commit/60f2121e9b66b7b622cc01080df0aabda9eedee6", "https://github.com/pillarjs/path-to-regexp/releases/tag/v6.3.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9wv6-86v2-598j", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pillarjs/path-to-regexp/commit/d31670ae8f6e69cbfd56e835742195b7d10942ef", "type": "Commit", "comment": "3.x"}, {"url": "https://github.com/pillarjs/path-to-regexp/commit/60f2121e9b66b7b622cc01080df0aabda9eedee6", "type": "Commit", "comment": "8.x"}, {"url": "https://github.com/pillarjs/path-to-regexp/releases/tag/v6.3.0", "type": "Release Note", "comment": ""}], "description": "The path-to-regexp turns path strings into regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). This issue affects path-to-regexp versions through 0.1.9, 0.2.0 through 1.8.0, 2.0.0 through 3.2.0, 4.0.0 through 6.2.2, and 7.0.0 through 7.2.0.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-path-to-regexp-0.1.7", "similarityId": null, "fixResolutionText": "0.1.12", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-52798", "cveName": "CVE-2024-52798", "score": 7.7, "severity": "High", "publishDate": "2024-12-05T23:15:00", "references": ["https://github.com/advisories/GHSA-rhx6-c78j-4q9w", "https://github.com/pillarjs/path-to-regexp/releases/tag/v0.1.12", "https://github.com/pillarjs/path-to-regexp/commit/f01c26a013b1889f0c217c643964513acf17f6a4", "https://blakeembrey.com/posts/2024-09-web-redos/"], "referencesData": [{"url": "https://github.com/advisories/GHSA-rhx6-c78j-4q9w", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pillarjs/path-to-regexp/releases/tag/v0.1.12", "type": "Release Note", "comment": ""}, {"url": "https://github.com/pillarjs/path-to-regexp/commit/f01c26a013b1889f0c217c643964513acf17f6a4", "type": "Commit", "comment": ""}, {"url": "https://blakeembrey.com/posts/2024-09-web-redos/", "type": "Blog Post", "comment": ""}], "description": "path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated. This issue affects path-to-regexp package versions through 0.1.11. Users are advised to upgrade to 0.1.12. This vulnerability exists because of an incomplete fix for CVE-2024-45296.\n", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Npm-path-to-regexp-0.1.7", "similarityId": null, "fixResolutionText": "0.1.12", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-45296", "cveName": "CVE-2024-45296", "score": 7.5, "severity": "High", "publishDate": "2024-09-09T19:15:00", "references": ["https://github.com/advisories/GHSA-9wv6-86v2-598j", "https://github.com/pillarjs/path-to-regexp/commit/d31670ae8f6e69cbfd56e835742195b7d10942ef", "https://github.com/pillarjs/path-to-regexp/commit/60f2121e9b66b7b622cc01080df0aabda9eedee6", "https://github.com/pillarjs/path-to-regexp/releases/tag/v6.3.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9wv6-86v2-598j", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pillarjs/path-to-regexp/commit/d31670ae8f6e69cbfd56e835742195b7d10942ef", "type": "Commit", "comment": "3.x"}, {"url": "https://github.com/pillarjs/path-to-regexp/commit/60f2121e9b66b7b622cc01080df0aabda9eedee6", "type": "Commit", "comment": "8.x"}, {"url": "https://github.com/pillarjs/path-to-regexp/releases/tag/v6.3.0", "type": "Release Note", "comment": ""}], "description": "The path-to-regexp turns path strings into regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). This issue affects path-to-regexp versions through 0.1.9, 0.2.0 through 1.8.0, 2.0.0 through 3.2.0, 4.0.0 through 6.2.2, and 7.0.0 through 7.2.0.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-path-to-regexp-1.8.0", "similarityId": null, "fixResolutionText": "1.9.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2023-44270", "cveName": "CVE-2023-44270", "score": 5.3, "severity": "Medium", "publishDate": "2023-09-29T10:44:00", "references": ["https://github.com/advisories/GHSA-7fh5-64p2-3v2j", "https://github.com/postcss/postcss/releases/tag/8.4.31", "https://github.com/postcss/postcss/commit/58cc860b4c1707510c9cd1bc1fa30b423a9ad6c5"], "referencesData": [{"url": "https://github.com/advisories/GHSA-7fh5-64p2-3v2j", "type": "Advisory", "comment": ""}, {"url": "https://github.com/postcss/postcss/releases/tag/8.4.31", "type": "Release Note", "comment": ""}, {"url": "https://github.com/postcss/postcss/commit/58cc860b4c1707510c9cd1bc1fa30b423a9ad6c5", "type": "Commit", "comment": ""}], "description": "An issue was discovered in postcss versions prior to 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being included in a comment.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-postcss-7.0.39", "similarityId": null, "fixResolutionText": "8.4.31", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-74", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2023-44270", "cveName": "CVE-2023-44270", "score": 5.3, "severity": "Medium", "publishDate": "2023-09-29T10:44:00", "references": ["https://github.com/advisories/GHSA-7fh5-64p2-3v2j", "https://github.com/postcss/postcss/releases/tag/8.4.31", "https://github.com/postcss/postcss/commit/58cc860b4c1707510c9cd1bc1fa30b423a9ad6c5"], "referencesData": [{"url": "https://github.com/advisories/GHSA-7fh5-64p2-3v2j", "type": "Advisory", "comment": ""}, {"url": "https://github.com/postcss/postcss/releases/tag/8.4.31", "type": "Release Note", "comment": ""}, {"url": "https://github.com/postcss/postcss/commit/58cc860b4c1707510c9cd1bc1fa30b423a9ad6c5", "type": "Commit", "comment": ""}], "description": "An issue was discovered in postcss versions prior to 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being included in a comment.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-postcss-8.4.16", "similarityId": null, "fixResolutionText": "8.4.31", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-74", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-47068", "cveName": "CVE-2024-47068", "score": 6.1, "severity": "Medium", "publishDate": "2024-09-23T16:15:00", "references": ["https://github.com/advisories/GHSA-gcx4-mw62-g8wm", "https://github.com/rollup/rollup/releases/tag/v4.22.4", "https://github.com/rollup/rollup/commit/e2552c9e955e0a61f70f508200ee9f752f85a541", "https://github.com/rollup/rollup/pull/5671"], "referencesData": [{"url": "https://github.com/advisories/GHSA-gcx4-mw62-g8wm", "type": "Advisory", "comment": ""}, {"url": "https://github.com/rollup/rollup/releases/tag/v4.22.4", "type": "Release Note", "comment": ""}, {"url": "https://github.com/rollup/rollup/commit/e2552c9e955e0a61f70f508200ee9f752f85a541", "type": "Commit", "comment": ""}, {"url": "https://github.com/rollup/rollup/pull/5671", "type": "Pull request", "comment": ""}], "description": "Rollup is a module bundler for JavaScript. In rollup versions prior to 2.79.2, 3.x prior to 3.29.5, and 4.x prior to 4.22.4 are susceptible to a DOM Clobbering vulnerability when bundling scripts with properties from \"import.meta\" (e.g., \"import.meta.url\") in \"cjs\"/\"umd\"/\"iife\" format. The DOM Clobbering gadget can lead to cross-site scripting (XSS) in web pages where scriptless attacker-controlled HTML elements (e.g., an \"img\" tag with an unsanitized \"name\" attribute) are present.", "cvss": {"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-rollup-2.79.0", "similarityId": null, "fixResolutionText": "2.79.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-79", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2022-25883", "cveName": "CVE-2022-25883", "score": 7.5, "severity": "High", "publishDate": "2023-06-21T05:15:00", "references": ["https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441", "https://github.com/npm/node-semver/pull/564", "https://github.com/npm/node-semver/commit/2f8fd41487acf380194579ecb6f8b1bbfe116be0", "https://github.com/npm/node-semver/commit/928e56d21150da0413a3333a3148b20e741a920c"], "referencesData": [{"url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "type": "Advisory", "comment": ""}, {"url": "https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441", "type": "Commit", "comment": "Main fix"}, {"url": "https://github.com/npm/node-semver/pull/564", "type": "Pull request", "comment": ""}, {"url": "https://github.com/npm/node-semver/commit/2f8fd41487acf380194579ecb6f8b1bbfe116be0", "type": "Commit", "comment": "Backport fix (v5.7.2)"}, {"url": "https://github.com/npm/node-semver/commit/928e56d21150da0413a3333a3148b20e741a920c", "type": "Commit", "comment": "Backport fix (v6.3.1)"}], "description": "The package semver versions prior to 5.7.2, 6.x through 6.3.0 and 7.x through 7.5.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function \"new Range\", when untrusted user data is provided as a range.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-semver-6.3.0", "similarityId": null, "fixResolutionText": "6.3.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2022-25883", "cveName": "CVE-2022-25883", "score": 7.5, "severity": "High", "publishDate": "2023-06-21T05:15:00", "references": ["https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441", "https://github.com/npm/node-semver/pull/564", "https://github.com/npm/node-semver/commit/2f8fd41487acf380194579ecb6f8b1bbfe116be0", "https://github.com/npm/node-semver/commit/928e56d21150da0413a3333a3148b20e741a920c"], "referencesData": [{"url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "type": "Advisory", "comment": ""}, {"url": "https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441", "type": "Commit", "comment": "Main fix"}, {"url": "https://github.com/npm/node-semver/pull/564", "type": "Pull request", "comment": ""}, {"url": "https://github.com/npm/node-semver/commit/2f8fd41487acf380194579ecb6f8b1bbfe116be0", "type": "Commit", "comment": "Backport fix (v5.7.2)"}, {"url": "https://github.com/npm/node-semver/commit/928e56d21150da0413a3333a3148b20e741a920c", "type": "Commit", "comment": "Backport fix (v6.3.1)"}], "description": "The package semver versions prior to 5.7.2, 6.x through 6.3.0 and 7.x through 7.5.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function \"new Range\", when untrusted user data is provided as a range.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-semver-7.0.0", "similarityId": null, "fixResolutionText": "7.5.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2022-25883", "cveName": "CVE-2022-25883", "score": 7.5, "severity": "High", "publishDate": "2023-06-21T05:15:00", "references": ["https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441", "https://github.com/npm/node-semver/pull/564", "https://github.com/npm/node-semver/commit/2f8fd41487acf380194579ecb6f8b1bbfe116be0", "https://github.com/npm/node-semver/commit/928e56d21150da0413a3333a3148b20e741a920c"], "referencesData": [{"url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "type": "Advisory", "comment": ""}, {"url": "https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441", "type": "Commit", "comment": "Main fix"}, {"url": "https://github.com/npm/node-semver/pull/564", "type": "Pull request", "comment": ""}, {"url": "https://github.com/npm/node-semver/commit/2f8fd41487acf380194579ecb6f8b1bbfe116be0", "type": "Commit", "comment": "Backport fix (v5.7.2)"}, {"url": "https://github.com/npm/node-semver/commit/928e56d21150da0413a3333a3148b20e741a920c", "type": "Commit", "comment": "Backport fix (v6.3.1)"}], "description": "The package semver versions prior to 5.7.2, 6.x through 6.3.0 and 7.x through 7.5.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function \"new Range\", when untrusted user data is provided as a range.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-semver-7.3.7", "similarityId": null, "fixResolutionText": "7.5.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-43799", "cveName": "CVE-2024-43799", "score": 4.7, "severity": "Medium", "publishDate": "2024-09-10T15:15:00", "references": ["https://github.com/advisories/GHSA-m6fv-jmcg-4jfg", "https://github.com/pillarjs/send/commit/8eaab61ebece87e1103fb4d2884b0f4f6977c173", "https://github.com/pillarjs/send/releases/tag/1.1.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-m6fv-jmcg-4jfg", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pillarjs/send/commit/8eaab61ebece87e1103fb4d2884b0f4f6977c173", "type": "Commit", "comment": ""}, {"url": "https://github.com/pillarjs/send/releases/tag/1.1.0", "type": "Release Note", "comment": ""}], "description": "Send is a library for streaming files from the file system as an HTTP response. Send passes untrusted user input to \"SendStream.redirect()\" which executes untrusted code. This vulnerability affects send versions through 0.18.0, and 1.0.0-beta.1 through 1.0.0.", "cvss": {"score": 4.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-send-0.18.0", "similarityId": null, "fixResolutionText": "0.19.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-79", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-43800", "cveName": "CVE-2024-43800", "score": 4.7, "severity": "Medium", "publishDate": "2024-09-10T15:15:00", "references": ["https://github.com/advisories/GHSA-cm22-4g7w-348p", "https://github.com/expressjs/serve-static/commit/ce730896fddce1588111d9ef6fdf20896de5c6fa", "https://github.com/expressjs/serve-static/pull/173", "https://github.com/expressjs/serve-static/releases/tag/2.1.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-cm22-4g7w-348p", "type": "Advisory", "comment": ""}, {"url": "https://github.com/expressjs/serve-static/commit/ce730896fddce1588111d9ef6fdf20896de5c6fa", "type": "Commit", "comment": ""}, {"url": "https://github.com/expressjs/serve-static/pull/173", "type": "Pull request", "comment": ""}, {"url": "https://github.com/expressjs/serve-static/releases/tag/2.1.0", "type": "Release Note", "comment": ""}], "description": "serve-static serves static files. serve-static passes untrusted user input even after sanitizing it to \"redirect()\" and may execute untrusted code. This issue affects serve-static versions prior to 1.16.0 and 2.0.x prior to 2.1.0.", "cvss": {"score": 4.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-serve-static-1.15.0", "similarityId": null, "fixResolutionText": "1.16.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-79", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2023-26136", "cveName": "CVE-2023-26136", "score": 9.8, "severity": "Critical", "publishDate": "2023-07-01T05:15:00", "references": ["https://github.com/advisories/GHSA-72xf-g2v4-qvf3", "https://github.com/salesforce/tough-cookie/releases/tag/v4.1.3", "https://github.com/salesforce/tough-cookie/issues/282", "https://github.com/salesforce/tough-cookie/pull/283", "https://github.com/salesforce/tough-cookie/commit/12d474791bb856004e858fdb1c47b7608d09cf6e"], "referencesData": [{"url": "https://github.com/advisories/GHSA-72xf-g2v4-qvf3", "type": "Advisory", "comment": ""}, {"url": "https://github.com/salesforce/tough-cookie/releases/tag/v4.1.3", "type": "Release Note", "comment": ""}, {"url": "https://github.com/salesforce/tough-cookie/issues/282", "type": "Issue", "comment": ""}, {"url": "https://github.com/salesforce/tough-cookie/pull/283", "type": "Pull request", "comment": ""}, {"url": "https://github.com/salesforce/tough-cookie/commit/12d474791bb856004e858fdb1c47b7608d09cf6e", "type": "Commit", "comment": ""}], "description": "The package tough-cookie in versions prior to 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in \"rejectPublicSuffixes=false\" mode. This issue arises from the manner in which the objects are initialized.", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Npm-tough-cookie-4.1.2", "similarityId": null, "fixResolutionText": "4.1.3", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1321", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2022-25927", "cveName": "CVE-2022-25927", "score": 7.5, "severity": "High", "publishDate": "2023-01-26T06:20:00", "references": ["https://github.com/advisories/GHSA-fhg7-m89q-25r3", "https://github.com/faisalman/ua-parser-js/commit/a6140a17dd0300a35cfc9cff999545f267889411"], "referencesData": [{"url": "https://github.com/advisories/GHSA-fhg7-m89q-25r3", "type": "Advisory", "comment": ""}, {"url": "https://github.com/faisalman/ua-parser-js/commit/a6140a17dd0300a35cfc9cff999545f267889411", "type": "Commit", "comment": ""}], "description": "Versions of the package ua-parser-js 0.7.30 through 0.7.32, and 0.8.1 through 1.0.32 are vulnerable to Regular Expression Denial of Service (ReDoS) via the \"trim()\" function.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-ua-parser-js-0.7.32", "similarityId": null, "fixResolutionText": "0.7.33", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2023-28154", "cveName": "CVE-2023-28154", "score": 9.8, "severity": "Critical", "publishDate": "2023-03-13T01:15:00", "references": ["https://github.com/advisories/GHSA-hc6q-2mpp-qw7j", "https://github.com/webpack/webpack/pull/16500", "https://github.com/webpack/webpack/commit/4b4ca3bb53f36a5b8fc6bc1bd976ed7af161bd80", "https://github.com/webpack/webpack/releases/tag/v5.76.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-hc6q-2mpp-qw7j", "type": "Advisory", "comment": ""}, {"url": "https://github.com/webpack/webpack/pull/16500", "type": "Pull request", "comment": ""}, {"url": "https://github.com/webpack/webpack/commit/4b4ca3bb53f36a5b8fc6bc1bd976ed7af161bd80", "type": "Commit", "comment": ""}, {"url": "https://github.com/webpack/webpack/releases/tag/v5.76.0", "type": "Release Note", "comment": ""}], "description": "Webpack 5.0.0-alpha.0 through 5.75.0 does not avoid cross-realm object access. ''ImportParserPlugin.js'' mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Npm-webpack-5.74.0", "similarityId": null, "fixResolutionText": "5.94.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-284", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-43788", "cveName": "CVE-2024-43788", "score": 6.1, "severity": "Medium", "publishDate": "2024-08-27T17:15:00", "references": ["https://github.com/advisories/GHSA-4vvj-4cpr-p986", "https://github.com/webpack/webpack/releases/tag/v5.94.0", "https://github.com/webpack/webpack/pull/18700", "https://github.com/webpack/webpack/commit/955e057abc6cc83cbc3fa1e1ef67a49758bf5a61", "https://github.com/advisories/GHSA-84jw-g43v-8gjm"], "referencesData": [{"url": "https://github.com/advisories/GHSA-4vvj-4cpr-p986", "type": "Advisory", "comment": ""}, {"url": "https://github.com/webpack/webpack/releases/tag/v5.94.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/webpack/webpack/pull/18700", "type": "Pull request", "comment": ""}, {"url": "https://github.com/webpack/webpack/commit/955e057abc6cc83cbc3fa1e1ef67a49758bf5a61", "type": "Commit", "comment": ""}, {"url": "https://github.com/advisories/GHSA-84jw-g43v-8gjm", "type": "Advisory", "comment": "Dependency "}], "description": "Webpack is a module bundler. Its main purpose is to bundle JavaScript files for usage in a browser, yet it is also capable of transforming, bundling, or packaging just about any resource or asset. The webpack developers have discovered a DOM Clobbering vulnerability in Webpack's \"AutoPublicPathRuntimeModule\". The DOM Clobbering gadget in the module can lead to Cross-Site Scripting (XSS) in web pages where scriptless attacker-controlled HTML elements (e.g., an \"img\" tag with an unsanitized \"name\" attribute) are present. Real-world exploitation of this gadget has been observed in the Canvas LMS which allows an XSS attack to happen through a javascript code compiled by Webpack (the vulnerable part is from Webpack). DOM Clobbering is a type of code-reuse attack where the attacker first embeds a piece of non-script, seemingly benign HTML markups in the webpage (e.g. through a post or comment) and leverages the gadgets (pieces of js code) living in the existing javascript code to transform it into executable code. This vulnerability can lead to Cross-Site Scripting (XSS) on websites that include Webpack-generated files and allow users to inject certain scriptless HTML tags with improperly sanitized name or id attributes. All users are advised to upgrade. There are no known workarounds for this issue. This issue affects webpack versions 5.0.0-beta.32 through 5.93.0.", "cvss": {"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-webpack-5.74.0", "similarityId": null, "fixResolutionText": "5.94.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-79", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-29180", "cveName": "CVE-2024-29180", "score": 7.5, "severity": "High", "publishDate": "2024-03-21T17:15:09", "references": ["https://github.com/advisories/GHSA-wr3j-pwj9-hqq6", "https://github.com/webpack/webpack-dev-middleware/pull/1771", "https://github.com/webpack/webpack-dev-middleware/commit/e10008c762e4d5821ed6990348dabf0d4d93a10e", "https://github.com/webpack/webpack-dev-middleware/releases/tag/v7.1.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-wr3j-pwj9-hqq6", "type": "Advisory", "comment": ""}, {"url": "https://github.com/webpack/webpack-dev-middleware/pull/1771", "type": "Pull request", "comment": ""}, {"url": "https://github.com/webpack/webpack-dev-middleware/commit/e10008c762e4d5821ed6990348dabf0d4d93a10e", "type": "Commit", "comment": ""}, {"url": "https://github.com/webpack/webpack-dev-middleware/releases/tag/v7.1.0", "type": "Release Note", "comment": ""}], "description": "In webpack-dev-middleware versions prior to 5.3.4, 6.x.x prior to 6.1.2, and 7.0.0 the development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file. It is possible to access any file on the developer's machine. The middleware can either work with the physical filesystem when reading the files or it can use a virtualized in-memory `memfs` filesystem. If `writeToDisk` configuration option is set to `true`, the physical filesystem is used. The `getFilenameFromUrl` method is used to parse URL and build the local file path. The public path prefix is stripped from the URL, and the `unsecaped` path suffix is appended to the `outputPath`. As the URL is not unescaped and normalized automatically before calling the midlleware, it is possible to use `%2e` and `%2f` sequences to perform path traversal attack.\n\nDevelopers using `webpack-dev-server` or `webpack-dev-middleware` are affected by the issue. When the project is started, an attacker might access any file on the developer's machine and exfiltrate the content. If the development server is listening on a public IP address (or `0.0.0.0`), an attacker on the local network can access the local files without any interaction from the victim (direct connection to the port). If the server allows access from third-party domains, an attacker can send a malicious link to the victim. When visited, the client-side script can connect to the local server and exfiltrate the local files. ", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-webpack-dev-middleware-5.3.3", "similarityId": null, "fixResolutionText": "5.3.4", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-22", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2023-26115", "cveName": "CVE-2023-26115", "score": 7.5, "severity": "High", "publishDate": "2023-06-22T13:00:00", "references": ["https://github.com/advisories/GHSA-j8xg-fqg3-53r7", "https://github.com/jonschlinkert/word-wrap/issues/32", "https://github.com/jonschlinkert/word-wrap/pull/33", "https://github.com/jonschlinkert/word-wrap/commit/d6e85142e85d939faeaac4307dcb19f15e553027"], "referencesData": [{"url": "https://github.com/advisories/GHSA-j8xg-fqg3-53r7", "type": "Advisory", "comment": ""}, {"url": "https://github.com/jonschlinkert/word-wrap/issues/32", "type": "Issue", "comment": ""}, {"url": "https://github.com/jonschlinkert/word-wrap/pull/33", "type": "Pull request", "comment": ""}, {"url": "https://github.com/jonschlinkert/word-wrap/commit/d6e85142e85d939faeaac4307dcb19f15e553027", "type": "Commit", "comment": ""}], "description": "Versions prior to 1.24 of the package word-wrap are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of an insecure regular expression within the result variable.\n", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-word-wrap-1.2.3", "similarityId": null, "fixResolutionText": "1.2.4", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-37890", "cveName": "CVE-2024-37890", "score": 7.5, "severity": "High", "publishDate": "2024-06-17T20:15:00", "references": ["https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "https://github.com/websockets/ws/issues/2230", "https://github.com/websockets/ws/pull/2231", "https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c", "https://github.com/websockets/ws/releases/tag/8.17.1"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "type": "Advisory", "comment": ""}, {"url": "https://github.com/websockets/ws/issues/2230", "type": "Issue", "comment": ""}, {"url": "https://github.com/websockets/ws/pull/2231", "type": "Pull request", "comment": ""}, {"url": "https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c", "type": "Commit", "comment": ""}, {"url": "https://github.com/websockets/ws/releases/tag/8.17.1", "type": "Release Note", "comment": ""}], "description": "The ws is an open-source WebSocket client and server for Node.js. A request with a number of headers exceeding the \"server.maxHeadersCount\" threshold could be used to crash a ws server. In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the \"--max-http-header-size=size\" and/or the \"maxHeaderSize\" options so that no more headers than the \"server.maxHeadersCount\" limit can be sent. 2. Set \"server.maxHeadersCount\" to \"0\" so that no limit is applied. This issue affects the package ws versions 2.1.0 through 5.2.3, 6.0.0 through 6.2.2, 7.0.0 through 7.5.9, and 8.0.0 through 8.17.0.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-ws-7.5.9", "similarityId": null, "fixResolutionText": "7.5.10", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-476", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2024-37890", "cveName": "CVE-2024-37890", "score": 7.5, "severity": "High", "publishDate": "2024-06-17T20:15:00", "references": ["https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "https://github.com/websockets/ws/issues/2230", "https://github.com/websockets/ws/pull/2231", "https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c", "https://github.com/websockets/ws/releases/tag/8.17.1"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "type": "Advisory", "comment": ""}, {"url": "https://github.com/websockets/ws/issues/2230", "type": "Issue", "comment": ""}, {"url": "https://github.com/websockets/ws/pull/2231", "type": "Pull request", "comment": ""}, {"url": "https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c", "type": "Commit", "comment": ""}, {"url": "https://github.com/websockets/ws/releases/tag/8.17.1", "type": "Release Note", "comment": ""}], "description": "The ws is an open-source WebSocket client and server for Node.js. A request with a number of headers exceeding the \"server.maxHeadersCount\" threshold could be used to crash a ws server. In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the \"--max-http-header-size=size\" and/or the \"maxHeaderSize\" options so that no more headers than the \"server.maxHeadersCount\" limit can be sent. 2. Set \"server.maxHeadersCount\" to \"0\" so that no limit is applied. This issue affects the package ws versions 2.1.0 through 5.2.3, 6.0.0 through 6.2.2, 7.0.0 through 7.5.9, and 8.0.0 through 8.17.0.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-ws-8.8.1", "similarityId": null, "fixResolutionText": "8.17.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-476", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "centralai-alchemist-ui", "_project_name": "inmobi-glance/centralai-alchemist-ui"}, {"id": "CVE-2023-45857", "cveName": "CVE-2023-45857", "score": 6.5, "severity": "Medium", "publishDate": "2023-11-08T21:15:00", "references": ["https://github.com/advisories/GHSA-wf5p-g6vw-rhxx", "https://github.com/axios/axios/issues/6006", "https://github.com/axios/axios/issues/6022", "https://github.com/axios/axios/pull/6028", "https://github.com/axios/axios/commit/96ee232bd3ee4de2e657333d4d2191cd389e14d0", "https://github.com/axios/axios/releases/tag/v1.6.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-wf5p-g6vw-rhxx", "type": "Advisory", "comment": ""}, {"url": "https://github.com/axios/axios/issues/6006", "type": "Issue", "comment": ""}, {"url": "https://github.com/axios/axios/issues/6022", "type": "Issue", "comment": ""}, {"url": "https://github.com/axios/axios/pull/6028", "type": "Pull request", "comment": ""}, {"url": "https://github.com/axios/axios/commit/96ee232bd3ee4de2e657333d4d2191cd389e14d0", "type": "Commit", "comment": ""}, {"url": "https://github.com/axios/axios/releases/tag/v1.6.0", "type": "Release Note", "comment": ""}], "description": "An issue discovered in Axios, inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host, allowing attackers to view sensitive information. This vulnerability affects axios package versions 0.8.1 through 1.5.1.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-axios-0.21.4", "similarityId": null, "fixResolutionText": "0.28.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-352", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-47178", "cveName": "CVE-2024-47178", "score": 5.3, "severity": "Medium", "publishDate": "2024-09-30T16:15:00", "references": ["https://github.com/advisories/GHSA-7p89-p6hx-q4fw", "https://github.com/expressjs/basic-auth-connect/commit/bac1e6a8530e1efd0028800b9b588a37adb0d203", "https://github.com/expressjs/basic-auth-connect/releases/tag/1.1.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-7p89-p6hx-q4fw", "type": "Advisory", "comment": ""}, {"url": "https://github.com/expressjs/basic-auth-connect/commit/bac1e6a8530e1efd0028800b9b588a37adb0d203", "type": "Commit", "comment": ""}, {"url": "https://github.com/expressjs/basic-auth-connect/releases/tag/1.1.0", "type": "Release Note", "comment": ""}], "description": "The package basic-auth-connect is Connect's Basic Auth middleware in its own module. The basic-auth-connect uses a timing-unsafe equality comparison that can leak timing information. This issue affects versions prior to 1.1.0.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-basic-auth-connect-1.0.0", "similarityId": null, "fixResolutionText": "1.1.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-208", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-45590", "cveName": "CVE-2024-45590", "score": 7.5, "severity": "High", "publishDate": "2024-09-10T16:15:00", "references": ["https://github.com/advisories/GHSA-qwcr-r2fm-qrc7", "https://github.com/expressjs/body-parser/commit/b2695c4450f06ba3b0ccf48d872a229bb41c9bce", "https://github.com/expressjs/body-parser/releases/tag/1.20.3"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qwcr-r2fm-qrc7", "type": "Advisory", "comment": ""}, {"url": "https://github.com/expressjs/body-parser/commit/b2695c4450f06ba3b0ccf48d872a229bb41c9bce", "type": "Commit", "comment": ""}, {"url": "https://github.com/expressjs/body-parser/releases/tag/1.20.3", "type": "Release Note", "comment": ""}], "description": "The body-parser is Node.js body parsing middleware. The body-parser package versions prior to 1.20.3 and 2.0.x prior to 2.0.0 are vulnerable to Denial of Service when URL encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in Denial of Service. ", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-body-parser-1.20.1", "similarityId": null, "fixResolutionText": "1.20.3", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-405", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-4068", "cveName": "CVE-2024-4068", "score": 7.5, "severity": "High", "publishDate": "2024-05-14T15:42:48", "references": ["https://advisory.checkmarx.net/advisory/CVE-2024-4068/", "https://github.com/micromatch/braces/issues/35", "https://github.com/advisories/GHSA-grv7-fg5c-xmjg", "https://github.com/micromatch/braces/pull/37", "https://github.com/micromatch/braces/pull/40", "https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff"], "referencesData": [{"url": "https://advisory.checkmarx.net/advisory/CVE-2024-4068/", "type": "Advisory", "comment": ""}, {"url": "https://github.com/micromatch/braces/issues/35", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-grv7-fg5c-xmjg", "type": "Advisory", "comment": ""}, {"url": "https://github.com/micromatch/braces/pull/37", "type": "Pull request", "comment": "Reverted fix"}, {"url": "https://github.com/micromatch/braces/pull/40", "type": "Pull request", "comment": "Fix PR"}, {"url": "https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff", "type": "Commit", "comment": "Lower defaultLength to 10000"}], "description": "The NPM package \"braces\", versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In \"lib/parse.js,\" if a malicious user sends \"imbalanced braces\" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-braces-3.0.2", "similarityId": null, "fixResolutionText": "3.0.3", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1050", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "Cx435a6fda-ca38", "cveName": "Cx435a6fda-ca38", "score": 4.5, "severity": "Medium", "publishDate": "2019-09-22T00:00:00", "references": ["https://github.com/tj/commander.js/releases/tag/v3.0.2", "https://github.com/tj/commander.js/pull/1056", "https://github.com/tj/commander.js/commit/2544df81b478a4afe15560f27b3575aa3a1581c4", "https://advisory.checkmarx.net/advisory/CX-2019-4298"], "referencesData": [{"url": "https://github.com/tj/commander.js/releases/tag/v3.0.2", "type": "Release Note", "comment": ""}, {"url": "https://github.com/tj/commander.js/pull/1056", "type": "Pull request", "comment": ""}, {"url": "https://github.com/tj/commander.js/commit/2544df81b478a4afe15560f27b3575aa3a1581c4", "type": "Commit", "comment": ""}, {"url": "https://advisory.checkmarx.net/advisory/CX-2019-4298", "type": "Advisory", "comment": ""}], "description": "A local code/OS command execution vulnerability was discovered in Commander.js, in the \"parse()\" method. Given a permission to write and set permissions on a file in the same working directory as the application, and given the ability to pass the value \"__proto__\" to the \"parse()\" method, an attacker can bypass checks against values set in _execs[] to execute an external file which was not intended.", "cvss": {"score": 4.5, "attackVector": "LOCAL", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.5, "attackVector": "LOCAL", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-commander-2.15.1", "similarityId": null, "fixResolutionText": "2.20.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1321", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-47764", "cveName": "CVE-2024-47764", "score": 5.3, "severity": "Medium", "publishDate": "2024-10-04T20:15:00", "references": ["https://github.com/advisories/GHSA-pxg6-pf52-xh8x", "https://github.com/jshttp/cookie/commit/e10042845354fea83bd8f34af72475eed1dadf5c", "https://github.com/jshttp/cookie/pull/167", "https://github.com/jshttp/cookie/releases/tag/v0.7.0", "https://github.com/jshttp/cookie/issues/165"], "referencesData": [{"url": "https://github.com/advisories/GHSA-pxg6-pf52-xh8x", "type": "Advisory", "comment": ""}, {"url": "https://github.com/jshttp/cookie/commit/e10042845354fea83bd8f34af72475eed1dadf5c", "type": "Commit", "comment": ""}, {"url": "https://github.com/jshttp/cookie/pull/167", "type": "Pull request", "comment": ""}, {"url": "https://github.com/jshttp/cookie/releases/tag/v0.7.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/jshttp/cookie/issues/165", "type": "Issue", "comment": ""}], "description": "The NPM package cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for \"path\" and \"domain\", which could be abused to alter other fields of the cookie. This vulnerability affects cookie package versions prior to 0.7.0. Users are advised to upgrade to a fixed version, which updates the validation for \"name\", \"path\", and \"domain\".", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-cookie-0.4.2", "similarityId": null, "fixResolutionText": "0.7.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-74", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-47764", "cveName": "CVE-2024-47764", "score": 5.3, "severity": "Medium", "publishDate": "2024-10-04T20:15:00", "references": ["https://github.com/advisories/GHSA-pxg6-pf52-xh8x", "https://github.com/jshttp/cookie/commit/e10042845354fea83bd8f34af72475eed1dadf5c", "https://github.com/jshttp/cookie/pull/167", "https://github.com/jshttp/cookie/releases/tag/v0.7.0", "https://github.com/jshttp/cookie/issues/165"], "referencesData": [{"url": "https://github.com/advisories/GHSA-pxg6-pf52-xh8x", "type": "Advisory", "comment": ""}, {"url": "https://github.com/jshttp/cookie/commit/e10042845354fea83bd8f34af72475eed1dadf5c", "type": "Commit", "comment": ""}, {"url": "https://github.com/jshttp/cookie/pull/167", "type": "Pull request", "comment": ""}, {"url": "https://github.com/jshttp/cookie/releases/tag/v0.7.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/jshttp/cookie/issues/165", "type": "Issue", "comment": ""}], "description": "The NPM package cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for \"path\" and \"domain\", which could be abused to alter other fields of the cookie. This vulnerability affects cookie package versions prior to 0.7.0. Users are advised to upgrade to a fixed version, which updates the validation for \"name\", \"path\", and \"domain\".", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-cookie-0.5.0", "similarityId": null, "fixResolutionText": "0.7.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-74", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-21538", "cveName": "CVE-2024-21538", "score": 7.7, "severity": "High", "publishDate": "2024-11-08T05:15:06", "references": ["https://github.com/advisories/GHSA-3xgq-45jj-v275", "https://github.com/moxystudio/node-cross-spawn/issues/165", "https://github.com/moxystudio/node-cross-spawn/pull/160", "https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff", "https://github.com/moxystudio/node-cross-spawn/issues/163", "https://github.com/moxystudio/node-cross-spawn/pull/162", "https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f", "https://github.com/moxystudio/node-cross-spawn/blob/v7.0.5/CHANGELOG.md"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "type": "Advisory", "comment": ""}, {"url": "https://github.com/moxystudio/node-cross-spawn/issues/165", "type": "Issue", "comment": ""}, {"url": "https://github.com/moxystudio/node-cross-spawn/pull/160", "type": "Pull request", "comment": "Initial PR"}, {"url": "https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff", "type": "Commit", "comment": "Initial fix"}, {"url": "https://github.com/moxystudio/node-cross-spawn/issues/163", "type": "Issue", "comment": ""}, {"url": "https://github.com/moxystudio/node-cross-spawn/pull/162", "type": "Pull request", "comment": "Additional PR"}, {"url": "https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f", "type": "Commit", "comment": "Additional fix"}, {"url": "https://github.com/moxystudio/node-cross-spawn/blob/v7.0.5/CHANGELOG.md", "type": "Release Note", "comment": ""}], "description": "Versions of the package cross-spawn prior to 6.0.6 and 7.x prior to 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS), due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-cross-spawn-7.0.3", "similarityId": null, "fixResolutionText": "7.0.5", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "Cx8bc4df28-fcf5", "cveName": "Cx8bc4df28-fcf5", "score": 3.7, "severity": "Low", "publishDate": "2020-12-10T17:14:00", "references": ["https://github.com/debug-js/debug/issues/737", "https://github.com/debug-js/debug/issues/656", "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "https://github.com/debug-js/debug/releases/tag/4.4.0"], "referencesData": [{"url": "https://github.com/debug-js/debug/issues/737", "type": "Issue", "comment": ""}, {"url": "https://github.com/debug-js/debug/issues/656", "type": "Other", "comment": "Roadmap that mentions Issue"}, {"url": "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "type": "POC/Exploit", "comment": ""}, {"url": "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "type": "Commit", "comment": ""}, {"url": "https://github.com/debug-js/debug/releases/tag/4.4.0", "type": "Release Note", "comment": ""}], "description": "In NPM \"debug\" versions prior to 4.4.0, the \"enable\" function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.", "cvss": {"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Npm-debug-2.6.9", "similarityId": null, "fixResolutionText": "4.4.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "Cx8bc4df28-fcf5", "cveName": "Cx8bc4df28-fcf5", "score": 3.7, "severity": "Low", "publishDate": "2020-12-10T17:14:00", "references": ["https://github.com/debug-js/debug/issues/737", "https://github.com/debug-js/debug/issues/656", "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "https://github.com/debug-js/debug/releases/tag/4.4.0"], "referencesData": [{"url": "https://github.com/debug-js/debug/issues/737", "type": "Issue", "comment": ""}, {"url": "https://github.com/debug-js/debug/issues/656", "type": "Other", "comment": "Roadmap that mentions Issue"}, {"url": "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "type": "POC/Exploit", "comment": ""}, {"url": "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "type": "Commit", "comment": ""}, {"url": "https://github.com/debug-js/debug/releases/tag/4.4.0", "type": "Release Note", "comment": ""}], "description": "In NPM \"debug\" versions prior to 4.4.0, the \"enable\" function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.", "cvss": {"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Npm-debug-3.2.7", "similarityId": null, "fixResolutionText": "4.4.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "Cx8bc4df28-fcf5", "cveName": "Cx8bc4df28-fcf5", "score": 3.7, "severity": "Low", "publishDate": "2020-12-10T17:14:00", "references": ["https://github.com/debug-js/debug/issues/737", "https://github.com/debug-js/debug/issues/656", "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "https://github.com/debug-js/debug/releases/tag/4.4.0"], "referencesData": [{"url": "https://github.com/debug-js/debug/issues/737", "type": "Issue", "comment": ""}, {"url": "https://github.com/debug-js/debug/issues/656", "type": "Other", "comment": "Roadmap that mentions Issue"}, {"url": "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "type": "POC/Exploit", "comment": ""}, {"url": "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "type": "Commit", "comment": ""}, {"url": "https://github.com/debug-js/debug/releases/tag/4.4.0", "type": "Release Note", "comment": ""}], "description": "In NPM \"debug\" versions prior to 4.4.0, the \"enable\" function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.", "cvss": {"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Npm-debug-4.3.4", "similarityId": null, "fixResolutionText": "4.4.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-33883", "cveName": "CVE-2024-33883", "score": 7.3, "severity": "High", "publishDate": "2024-04-28T16:15:00", "references": ["https://github.com/advisories/GHSA-ghr5-ch3p-vcr6", "https://github.com/mde/ejs/commit/e469741dca7df2eb400199e1cdb74621e3f89aa5"], "referencesData": [{"url": "https://github.com/advisories/GHSA-ghr5-ch3p-vcr6", "type": "Advisory", "comment": ""}, {"url": "https://github.com/mde/ejs/commit/e469741dca7df2eb400199e1cdb74621e3f89aa5", "type": "Commit", "comment": ""}], "description": "The ejs (aka Embedded JavaScript templates) package versions prior to 3.1.10 for Node.js lacks certain pollution protection.", "cvss": {"score": 7.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-ejs-3.1.9", "similarityId": null, "fixResolutionText": "3.1.10", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1321", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-43796", "cveName": "CVE-2024-43796", "score": 4.7, "severity": "Medium", "publishDate": "2024-09-10T15:15:00", "references": ["https://github.com/advisories/GHSA-qw6h-vgh9-j6wx", "https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553", "https://github.com/expressjs/express/releases/tag/4.20.0", "https://github.com/expressjs/express/pull/5785"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qw6h-vgh9-j6wx", "type": "Advisory", "comment": ""}, {"url": "https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553", "type": "Commit", "comment": ""}, {"url": "https://github.com/expressjs/express/releases/tag/4.20.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/expressjs/express/pull/5785", "type": "Pull request", "comment": ""}], "description": "Express.js minimalist web framework for node. In express versions prior to 4.20.0 and 5.0.x prior to 5.0.0, passing untrusted user input even after sanitizing it to \"response.redirect()\" may execute untrusted code.", "cvss": {"score": 4.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-express-4.18.2", "similarityId": null, "fixResolutionText": "4.20.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-79", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-29041", "cveName": "CVE-2024-29041", "score": 6.1, "severity": "Medium", "publishDate": "2024-03-25T21:15:46", "references": ["https://github.com/advisories/GHSA-rv95-896h-c2vc", "https://github.com/expressjs/express/releases/tag/4.19.2", "https://github.com/expressjs/express/pull/5551", "https://github.com/expressjs/express/commit/0867302ddbde0e9463d0564fea5861feb708c2dd", "https://github.com/expressjs/express/pull/5561", "https://github.com/expressjs/express/commit/0b746953c4bd8e377123527db11f9cd866e39f94"], "referencesData": [{"url": "https://github.com/advisories/GHSA-rv95-896h-c2vc", "type": "Advisory", "comment": ""}, {"url": "https://github.com/expressjs/express/releases/tag/4.19.2", "type": "Release Note", "comment": ""}, {"url": "https://github.com/expressjs/express/pull/5551", "type": "Pull request", "comment": ""}, {"url": "https://github.com/expressjs/express/commit/0867302ddbde0e9463d0564fea5861feb708c2dd", "type": "Commit", "comment": "Initial fix"}, {"url": "https://github.com/expressjs/express/pull/5561", "type": "Pull request", "comment": ""}, {"url": "https://github.com/expressjs/express/commit/0b746953c4bd8e377123527db11f9cd866e39f94", "type": "Commit", "comment": "Additional fix"}], "description": "Express.js minimalist web framework for node. Express.js versions prior to 4.19.2, and 5.0.x prior to 5.0.0-beta.3 are affected by an open redirect vulnerability using malformed URLs. When a user of Express performs a redirect using a user-provided URL Express performs an encode using \"encodeurl\" on the contents before passing it to the \"location\" header. This can cause malformed URLs to be evaluated in unexpected ways by common redirect allow list implementations in Express applications, leading to an Open Redirect via bypass of a properly implemented allow list. The main method impacted is \"res.location()\" but this is also called from within \"res.redirect()\".", "cvss": {"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-express-4.18.2", "similarityId": null, "fixResolutionText": "4.20.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-601", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-41818", "cveName": "CVE-2024-41818", "score": 7.5, "severity": "High", "publishDate": "2024-07-29T16:15:00", "references": ["https://github.com/advisories/GHSA-mpg4-rc92-vx8v", "https://github.com/NaturalIntelligence/fast-xml-parser/commit/d0bfe8a3a2813a185f39591bbef222212d856164", "https://github.com/NaturalIntelligence/fast-xml-parser/blob/v4.4.1/CHANGELOG.md"], "referencesData": [{"url": "https://github.com/advisories/GHSA-mpg4-rc92-vx8v", "type": "Advisory", "comment": ""}, {"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/d0bfe8a3a2813a185f39591bbef222212d856164", "type": "Commit", "comment": ""}, {"url": "https://github.com/NaturalIntelligence/fast-xml-parser/blob/v4.4.1/CHANGELOG.md", "type": "Release Note", "comment": ""}], "description": "The fast-xml-parser is an open-source, pure JavaScript XML parser. The package fast-xml-parser versions 4.3.5 through 4.4.0 are vulnerable to ReDOS existing on \"currency.js\".", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-fast-xml-parser-4.4.0", "similarityId": null, "fixResolutionText": "4.4.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2022-29622", "cveName": "CVE-2022-29622", "score": 5.9, "severity": "Medium", "publishDate": "2022-05-16T14:15:00", "references": ["https://github.com/advisories/GHSA-8cp3-66vr-3r4c", "https://github.com/node-formidable/formidable/issues/856", "https://github.com/node-formidable/formidable/pull/857", "https://github.com/node-formidable/formidable/commit/81dd350835e14dccca667fc46bc5c35f16f1b5ec"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8cp3-66vr-3r4c", "type": "Advisory", "comment": ""}, {"url": "https://github.com/node-formidable/formidable/issues/856", "type": "Issue", "comment": ""}, {"url": "https://github.com/node-formidable/formidable/pull/857", "type": "Pull request", "comment": ""}, {"url": "https://github.com/node-formidable/formidable/commit/81dd350835e14dccca667fc46bc5c35f16f1b5ec", "type": "Commit", "comment": ""}], "description": "An arbitrary file upload vulnerability in formidable versions prior to 3.2.4, allows attackers to execute arbitrary code via a crafted \"filename\". NOTE: some third parties dispute this issue because the product has common use cases in which uploading arbitrary files is the desired behavior. Also, there are configuration options in all versions that can change the default behavior of how files are handled.", "cvss": {"score": 5.9, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "High", "cvss3Severity": null}, {"score": 5.9, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-formidable-2.1.2", "similarityId": null, "fixResolutionText": "3.3.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-434", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "Cxdca8e59f-8bfe", "cveName": "Cxdca8e59f-8bfe", "score": 7.5, "severity": "High", "publishDate": "2020-12-07T10:10:00", "references": ["https://github.com/npm/inflight/issues/5"], "referencesData": [{"url": "https://github.com/npm/inflight/issues/5", "type": "Issue", "comment": ""}], "description": "In NPM `inflight` there is a Memory Leak because some resources are not freed correctly after being used. It appears to affect all versions, as the issue was not addressed and no fix is found. NOTE: In the meantime, `logdna-agent`, a package that depends on `inflight`, has merged a commit to address this solely in their package (so it should be fixed in `logdna-agent` in versions 1.6.5 and later). `Node-glob`, a package that also depends on `inflight`, was also planning to address this by not using `inflight` after version 8 is released, but it is still being used.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-inflight-1.0.6", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-772", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2020-26302", "cveName": "CVE-2020-26302", "score": 7.5, "severity": "High", "publishDate": "2022-12-22T21:15:00", "references": ["https://github.com/advisories/GHSA-pvrw-g6fx-mcx2", "https://securitylab.github.com/advisories/GHSL-2020-295-redos-is.js/", "https://github.com/arasatasaygin/is.js/issues/320", "https://github.com/arasatasaygin/is.js/blob/45d1c9fe37bb9abb17e64781906f97c803a4bb85/is.js#L347"], "referencesData": [{"url": "https://github.com/advisories/GHSA-pvrw-g6fx-mcx2", "type": "Advisory", "comment": ""}, {"url": "https://securitylab.github.com/advisories/GHSL-2020-295-redos-is.js/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/arasatasaygin/is.js/issues/320", "type": "Issue", "comment": ""}, {"url": "https://github.com/arasatasaygin/is.js/blob/45d1c9fe37bb9abb17e64781906f97c803a4bb85/is.js#L347", "type": "Vulnerable code", "comment": ""}], "description": "The package is.js is a general-purpose check library. It contains one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). The \"is.js\" uses a regex copy-pasted from gist to validate URLs. Trying to validate a malicious string can cause the regex to loop \"forever\". This vulnerability was found using a CodeQL query which identifies inefficient regular expressions. is_js has no patch for this issue.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-is_js-0.9.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-4067", "cveName": "CVE-2024-4067", "score": 5.3, "severity": "Medium", "publishDate": "2024-05-14T15:42:47", "references": ["https://advisory.checkmarx.net/advisory/CVE-2024-4067/", "https://github.com/micromatch/micromatch/pull/266", "https://github.com/micromatch/micromatch/commit/03aa8052171e878897eee5d7bb2ae0ae83ec2ade", "https://github.com/micromatch/micromatch/releases/tag/4.0.8", "https://github.com/advisories/GHSA-952p-6rrq-rcjv"], "referencesData": [{"url": "https://advisory.checkmarx.net/advisory/CVE-2024-4067/", "type": "Advisory", "comment": ""}, {"url": "https://github.com/micromatch/micromatch/pull/266", "type": "Pull request", "comment": ""}, {"url": "https://github.com/micromatch/micromatch/commit/03aa8052171e878897eee5d7bb2ae0ae83ec2ade", "type": "Commit", "comment": ""}, {"url": "https://github.com/micromatch/micromatch/releases/tag/4.0.8", "type": "Release Note", "comment": ""}, {"url": "https://github.com/advisories/GHSA-952p-6rrq-rcjv", "type": "Advisory", "comment": "GHSA"}], "description": "The NPM package \"micromatch\" prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in \"micromatch.braces()\" in \"index.js\" because the pattern \".*\" will greedily match anything. By passing a malicious payload, the pattern matching will keep backtracking to the input while it doesn't find the closing bracket. As the input size increases, the consumption time will also increase until it causes the application to hang or slow down. There was a merged fix but further testing shows the issue still persists. This issue should be mitigated by using a safe pattern that won't start backtracking the regular expression due to its greedy matching.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-micromatch-4.0.5", "similarityId": null, "fixResolutionText": "4.0.8", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2025-23061", "cveName": "CVE-2025-23061", "score": 9.8, "severity": "Critical", "publishDate": "2025-01-15T05:15:10", "references": ["https://github.com/advisories/GHSA-vg7j-7cwx-8wgw", "https://github.com/Automattic/mongoose/releases/tag/8.9.5", "https://github.com/Automattic/mongoose/commit/64a9f9706f2428c49e0cfb8e223065acc645f7bc"], "referencesData": [{"url": "https://github.com/advisories/GHSA-vg7j-7cwx-8wgw", "type": "Advisory", "comment": ""}, {"url": "https://github.com/Automattic/mongoose/releases/tag/8.9.5", "type": "Release Note", "comment": ""}, {"url": "https://github.com/Automattic/mongoose/commit/64a9f9706f2428c49e0cfb8e223065acc645f7bc", "type": "Commit", "comment": ""}], "description": "Mongoose versions prior to 6.13.6, 7.x prior to 7.8.4 and 8.x prior to 8.9.5 can improperly use a nested \"$where\" filter with a \"populate()\" match, leading to search injection.", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Npm-mongoose-6.12.3", "similarityId": null, "fixResolutionText": "6.13.6", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-94", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-53900", "cveName": "CVE-2024-53900", "score": 8.7, "severity": "High", "publishDate": "2024-12-02T20:15:08", "references": ["https://github.com/advisories/GHSA-m7xq-9374-9rvx", "https://github.com/Automattic/mongoose/releases/tag/8.8.3", "https://github.com/Automattic/mongoose/commit/c9e86bff7eef477da75a29af62a06d41a835a156"], "referencesData": [{"url": "https://github.com/advisories/GHSA-m7xq-9374-9rvx", "type": "Advisory", "comment": ""}, {"url": "https://github.com/Automattic/mongoose/releases/tag/8.8.3", "type": "Release Note", "comment": ""}, {"url": "https://github.com/Automattic/mongoose/commit/c9e86bff7eef477da75a29af62a06d41a835a156", "type": "Commit", "comment": ""}], "description": "Mongoose versions prior to 6.13.5, 7.0.x prior to 7.8.3, 8.0.x prior to 8.8.3 can improperly use \"$where\" in match.", "cvss": {"score": 9.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 9.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Npm-mongoose-6.12.3", "similarityId": null, "fixResolutionText": "6.13.6", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-89", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-55565", "cveName": "CVE-2024-55565", "score": 6.3, "severity": "Medium", "publishDate": "2024-12-09T02:15:00", "references": ["https://github.com/advisories/GHSA-mwcw-c2x4-8c55", "https://github.com/ai/nanoid/pull/510", "https://github.com/ai/nanoid/commit/d643045f40d6dc8afa000a644d857da1436ed08c", "https://github.com/ai/nanoid/releases/tag/5.0.9"], "referencesData": [{"url": "https://github.com/advisories/GHSA-mwcw-c2x4-8c55", "type": "Advisory", "comment": ""}, {"url": "https://github.com/ai/nanoid/pull/510", "type": "Pull request", "comment": ""}, {"url": "https://github.com/ai/nanoid/commit/d643045f40d6dc8afa000a644d857da1436ed08c", "type": "Commit", "comment": ""}, {"url": "https://github.com/ai/nanoid/releases/tag/5.0.9", "type": "Release Note", "comment": ""}], "description": "The package nanoid versions through 3.3.7 and 4.0.0 through 5.0.8 mishandle non-integer values. ", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Npm-nanoid-3.3.3", "similarityId": null, "fixResolutionText": "3.3.8", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-835", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-45296", "cveName": "CVE-2024-45296", "score": 7.5, "severity": "High", "publishDate": "2024-09-09T19:15:00", "references": ["https://github.com/advisories/GHSA-9wv6-86v2-598j", "https://github.com/pillarjs/path-to-regexp/commit/d31670ae8f6e69cbfd56e835742195b7d10942ef", "https://github.com/pillarjs/path-to-regexp/commit/60f2121e9b66b7b622cc01080df0aabda9eedee6", "https://github.com/pillarjs/path-to-regexp/releases/tag/v6.3.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9wv6-86v2-598j", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pillarjs/path-to-regexp/commit/d31670ae8f6e69cbfd56e835742195b7d10942ef", "type": "Commit", "comment": "3.x"}, {"url": "https://github.com/pillarjs/path-to-regexp/commit/60f2121e9b66b7b622cc01080df0aabda9eedee6", "type": "Commit", "comment": "8.x"}, {"url": "https://github.com/pillarjs/path-to-regexp/releases/tag/v6.3.0", "type": "Release Note", "comment": ""}], "description": "The path-to-regexp turns path strings into regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). This issue affects path-to-regexp versions through 0.1.9, 0.2.0 through 1.8.0, 2.0.0 through 3.2.0, 4.0.0 through 6.2.2, and 7.0.0 through 7.2.0.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-path-to-regexp-0.1.7", "similarityId": null, "fixResolutionText": "0.1.12", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-52798", "cveName": "CVE-2024-52798", "score": 7.7, "severity": "High", "publishDate": "2024-12-05T23:15:00", "references": ["https://github.com/advisories/GHSA-rhx6-c78j-4q9w", "https://github.com/pillarjs/path-to-regexp/releases/tag/v0.1.12", "https://github.com/pillarjs/path-to-regexp/commit/f01c26a013b1889f0c217c643964513acf17f6a4", "https://blakeembrey.com/posts/2024-09-web-redos/"], "referencesData": [{"url": "https://github.com/advisories/GHSA-rhx6-c78j-4q9w", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pillarjs/path-to-regexp/releases/tag/v0.1.12", "type": "Release Note", "comment": ""}, {"url": "https://github.com/pillarjs/path-to-regexp/commit/f01c26a013b1889f0c217c643964513acf17f6a4", "type": "Commit", "comment": ""}, {"url": "https://blakeembrey.com/posts/2024-09-web-redos/", "type": "Blog Post", "comment": ""}], "description": "path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated. This issue affects path-to-regexp package versions through 0.1.11. Users are advised to upgrade to 0.1.12. This vulnerability exists because of an incomplete fix for CVE-2024-45296.\n", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Npm-path-to-regexp-0.1.7", "similarityId": null, "fixResolutionText": "0.1.12", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-43799", "cveName": "CVE-2024-43799", "score": 4.7, "severity": "Medium", "publishDate": "2024-09-10T15:15:00", "references": ["https://github.com/advisories/GHSA-m6fv-jmcg-4jfg", "https://github.com/pillarjs/send/commit/8eaab61ebece87e1103fb4d2884b0f4f6977c173", "https://github.com/pillarjs/send/releases/tag/1.1.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-m6fv-jmcg-4jfg", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pillarjs/send/commit/8eaab61ebece87e1103fb4d2884b0f4f6977c173", "type": "Commit", "comment": ""}, {"url": "https://github.com/pillarjs/send/releases/tag/1.1.0", "type": "Release Note", "comment": ""}], "description": "Send is a library for streaming files from the file system as an HTTP response. Send passes untrusted user input to \"SendStream.redirect()\" which executes untrusted code. This vulnerability affects send versions through 0.18.0, and 1.0.0-beta.1 through 1.0.0.", "cvss": {"score": 4.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-send-0.18.0", "similarityId": null, "fixResolutionText": "0.19.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-79", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-43800", "cveName": "CVE-2024-43800", "score": 4.7, "severity": "Medium", "publishDate": "2024-09-10T15:15:00", "references": ["https://github.com/advisories/GHSA-cm22-4g7w-348p", "https://github.com/expressjs/serve-static/commit/ce730896fddce1588111d9ef6fdf20896de5c6fa", "https://github.com/expressjs/serve-static/pull/173", "https://github.com/expressjs/serve-static/releases/tag/2.1.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-cm22-4g7w-348p", "type": "Advisory", "comment": ""}, {"url": "https://github.com/expressjs/serve-static/commit/ce730896fddce1588111d9ef6fdf20896de5c6fa", "type": "Commit", "comment": ""}, {"url": "https://github.com/expressjs/serve-static/pull/173", "type": "Pull request", "comment": ""}, {"url": "https://github.com/expressjs/serve-static/releases/tag/2.1.0", "type": "Release Note", "comment": ""}], "description": "serve-static serves static files. serve-static passes untrusted user input even after sanitizing it to \"redirect()\" and may execute untrusted code. This issue affects serve-static versions prior to 1.16.0 and 2.0.x prior to 2.1.0.", "cvss": {"score": 4.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-serve-static-1.15.0", "similarityId": null, "fixResolutionText": "1.16.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-79", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-56334", "cveName": "CVE-2024-56334", "score": 7.8, "severity": "High", "publishDate": "2024-12-20T21:15:00", "references": ["https://github.com/advisories/GHSA-cvv5-9h9w-qp2m", "https://github.com/sebhildebrandt/systeminformation/blob/v5.23.7/CHANGELOG.md#version-history", "https://github.com/sebhildebrandt/systeminformation/commit/f7af0a67b78e7894335a6cad510566a25e06ae41"], "referencesData": [{"url": "https://github.com/advisories/GHSA-cvv5-9h9w-qp2m", "type": "Advisory", "comment": ""}, {"url": "https://github.com/sebhildebrandt/systeminformation/blob/v5.23.7/CHANGELOG.md#version-history", "type": "Release Note", "comment": ""}, {"url": "https://github.com/sebhildebrandt/systeminformation/commit/f7af0a67b78e7894335a6cad510566a25e06ae41", "type": "Commit", "comment": ""}], "description": "The package systeminformation is a system and OS information library for Node.js. In affected versions, SSIDs are not sanitized before being passed as a parameter to `cmd.exe` in the `getWindowsIEEE8021x` function. This means that malicious content in the SSID can be executed as OS commands. This vulnerability may enable an attacker, depending on how the package is used, to perform remote code execution or local privilege escalation. This issue affects systeminformation versions 4.17.0 through 5.23.6.", "cvss": {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-systeminformation-5.21.20", "similarityId": null, "fixResolutionText": "5.23.8", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-94", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-28863", "cveName": "CVE-2024-28863", "score": 6.5, "severity": "Medium", "publishDate": "2024-03-21T23:15:10", "references": ["https://github.com/advisories/GHSA-f5x3-32g6-xq36", "https://github.com/isaacs/node-tar/commit/fe8cd57da5686f8695415414bda49206a545f7f7"], "referencesData": [{"url": "https://github.com/advisories/GHSA-f5x3-32g6-xq36", "type": "Advisory", "comment": ""}, {"url": "https://github.com/isaacs/node-tar/commit/fe8cd57da5686f8695415414bda49206a545f7f7", "type": "Commit", "comment": ""}], "description": "node-tar is a Tar for Node.js. tar versions prior to 6.2.1 have no limit on the number of sub-folders created in the folder creation process. An attacker who generates a large number of sub-folders can consume memory on the system running node-tar and even crash the Node.js client within a few seconds of running it using a path with too many sub-folders inside. This issue was fixed by preventing extraction in excessively deep sub-folders.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-tar-6.2.0", "similarityId": null, "fixResolutionText": "6.2.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-37890", "cveName": "CVE-2024-37890", "score": 7.5, "severity": "High", "publishDate": "2024-06-17T20:15:00", "references": ["https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "https://github.com/websockets/ws/issues/2230", "https://github.com/websockets/ws/pull/2231", "https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c", "https://github.com/websockets/ws/releases/tag/8.17.1"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "type": "Advisory", "comment": ""}, {"url": "https://github.com/websockets/ws/issues/2230", "type": "Issue", "comment": ""}, {"url": "https://github.com/websockets/ws/pull/2231", "type": "Pull request", "comment": ""}, {"url": "https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c", "type": "Commit", "comment": ""}, {"url": "https://github.com/websockets/ws/releases/tag/8.17.1", "type": "Release Note", "comment": ""}], "description": "The ws is an open-source WebSocket client and server for Node.js. A request with a number of headers exceeding the \"server.maxHeadersCount\" threshold could be used to crash a ws server. In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the \"--max-http-header-size=size\" and/or the \"maxHeaderSize\" options so that no more headers than the \"server.maxHeadersCount\" limit can be sent. 2. Set \"server.maxHeadersCount\" to \"0\" so that no limit is applied. This issue affects the package ws versions 2.1.0 through 5.2.3, 6.0.0 through 6.2.2, 7.0.0 through 7.5.9, and 8.0.0 through 8.17.0.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-ws-7.4.6", "similarityId": null, "fixResolutionText": "7.5.10", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-476", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-37890", "cveName": "CVE-2024-37890", "score": 7.5, "severity": "High", "publishDate": "2024-06-17T20:15:00", "references": ["https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "https://github.com/websockets/ws/issues/2230", "https://github.com/websockets/ws/pull/2231", "https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c", "https://github.com/websockets/ws/releases/tag/8.17.1"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "type": "Advisory", "comment": ""}, {"url": "https://github.com/websockets/ws/issues/2230", "type": "Issue", "comment": ""}, {"url": "https://github.com/websockets/ws/pull/2231", "type": "Pull request", "comment": ""}, {"url": "https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c", "type": "Commit", "comment": ""}, {"url": "https://github.com/websockets/ws/releases/tag/8.17.1", "type": "Release Note", "comment": ""}], "description": "The ws is an open-source WebSocket client and server for Node.js. A request with a number of headers exceeding the \"server.maxHeadersCount\" threshold could be used to crash a ws server. In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the \"--max-http-header-size=size\" and/or the \"maxHeaderSize\" options so that no more headers than the \"server.maxHeadersCount\" limit can be sent. 2. Set \"server.maxHeadersCount\" to \"0\" so that no limit is applied. This issue affects the package ws versions 2.1.0 through 5.2.3, 6.0.0 through 6.2.2, 7.0.0 through 7.5.9, and 8.0.0 through 8.17.0.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-ws-8.11.0", "similarityId": null, "fixResolutionText": "8.17.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-476", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "CVE-2024-37890", "cveName": "CVE-2024-37890", "score": 7.5, "severity": "High", "publishDate": "2024-06-17T20:15:00", "references": ["https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "https://github.com/websockets/ws/issues/2230", "https://github.com/websockets/ws/pull/2231", "https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c", "https://github.com/websockets/ws/releases/tag/8.17.1"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "type": "Advisory", "comment": ""}, {"url": "https://github.com/websockets/ws/issues/2230", "type": "Issue", "comment": ""}, {"url": "https://github.com/websockets/ws/pull/2231", "type": "Pull request", "comment": ""}, {"url": "https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c", "type": "Commit", "comment": ""}, {"url": "https://github.com/websockets/ws/releases/tag/8.17.1", "type": "Release Note", "comment": ""}], "description": "The ws is an open-source WebSocket client and server for Node.js. A request with a number of headers exceeding the \"server.maxHeadersCount\" threshold could be used to crash a ws server. In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the \"--max-http-header-size=size\" and/or the \"maxHeaderSize\" options so that no more headers than the \"server.maxHeadersCount\" limit can be sent. 2. Set \"server.maxHeadersCount\" to \"0\" so that no limit is applied. This issue affects the package ws versions 2.1.0 through 5.2.3, 6.0.0 through 6.2.2, 7.0.0 through 7.5.9, and 8.0.0 through 8.17.0.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-ws-8.13.0", "similarityId": null, "fixResolutionText": "8.17.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-476", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-backend", "_project_name": "inmobi-glance/games-community-backend"}, {"id": "Cxda14f253-4e52", "cveName": "Cxda14f253-4e52", "score": 3.7, "severity": "Low", "publishDate": "2016-04-24T21:00:00", "references": ["https://github.com/petkaantonov/bluebird/issues/1080"], "referencesData": [{"url": "https://github.com/petkaantonov/bluebird/issues/1080", "type": "Issue", "comment": ""}], "description": "The package `bluebird` is vulnerable to memory leak, when running the function longStackTraces() with the flag `--expose_gc`. This causes a significant increase in the memory usage, affecting the server's availability.", "cvss": {"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Npm-bluebird-3.7.2", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-401", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-frontend", "_project_name": "inmobi-glance/games-community-frontend"}, {"id": "Cx8bc4df28-fcf5", "cveName": "Cx8bc4df28-fcf5", "score": 3.7, "severity": "Low", "publishDate": "2020-12-10T17:14:00", "references": ["https://github.com/debug-js/debug/issues/737", "https://github.com/debug-js/debug/issues/656", "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "https://github.com/debug-js/debug/releases/tag/4.4.0"], "referencesData": [{"url": "https://github.com/debug-js/debug/issues/737", "type": "Issue", "comment": ""}, {"url": "https://github.com/debug-js/debug/issues/656", "type": "Other", "comment": "Roadmap that mentions Issue"}, {"url": "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "type": "POC/Exploit", "comment": ""}, {"url": "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "type": "Commit", "comment": ""}, {"url": "https://github.com/debug-js/debug/releases/tag/4.4.0", "type": "Release Note", "comment": ""}], "description": "In NPM \"debug\" versions prior to 4.4.0, the \"enable\" function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.", "cvss": {"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Npm-debug-2.6.9", "similarityId": null, "fixResolutionText": "4.4.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-frontend", "_project_name": "inmobi-glance/games-community-frontend"}, {"id": "Cx8bc4df28-fcf5", "cveName": "Cx8bc4df28-fcf5", "score": 3.7, "severity": "Low", "publishDate": "2020-12-10T17:14:00", "references": ["https://github.com/debug-js/debug/issues/737", "https://github.com/debug-js/debug/issues/656", "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "https://github.com/debug-js/debug/releases/tag/4.4.0"], "referencesData": [{"url": "https://github.com/debug-js/debug/issues/737", "type": "Issue", "comment": ""}, {"url": "https://github.com/debug-js/debug/issues/656", "type": "Other", "comment": "Roadmap that mentions Issue"}, {"url": "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "type": "POC/Exploit", "comment": ""}, {"url": "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "type": "Commit", "comment": ""}, {"url": "https://github.com/debug-js/debug/releases/tag/4.4.0", "type": "Release Note", "comment": ""}], "description": "In NPM \"debug\" versions prior to 4.4.0, the \"enable\" function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.", "cvss": {"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Npm-debug-3.2.7", "similarityId": null, "fixResolutionText": "4.4.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-frontend", "_project_name": "inmobi-glance/games-community-frontend"}, {"id": "Cx8bc4df28-fcf5", "cveName": "Cx8bc4df28-fcf5", "score": 3.7, "severity": "Low", "publishDate": "2020-12-10T17:14:00", "references": ["https://github.com/debug-js/debug/issues/737", "https://github.com/debug-js/debug/issues/656", "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "https://github.com/debug-js/debug/releases/tag/4.4.0"], "referencesData": [{"url": "https://github.com/debug-js/debug/issues/737", "type": "Issue", "comment": ""}, {"url": "https://github.com/debug-js/debug/issues/656", "type": "Other", "comment": "Roadmap that mentions Issue"}, {"url": "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "type": "POC/Exploit", "comment": ""}, {"url": "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "type": "Commit", "comment": ""}, {"url": "https://github.com/debug-js/debug/releases/tag/4.4.0", "type": "Release Note", "comment": ""}], "description": "In NPM \"debug\" versions prior to 4.4.0, the \"enable\" function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.", "cvss": {"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Npm-debug-4.3.4", "similarityId": null, "fixResolutionText": "4.4.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-frontend", "_project_name": "inmobi-glance/games-community-frontend"}, {"id": "Cxdca8e59f-8bfe", "cveName": "Cxdca8e59f-8bfe", "score": 7.5, "severity": "High", "publishDate": "2020-12-07T10:10:00", "references": ["https://github.com/npm/inflight/issues/5"], "referencesData": [{"url": "https://github.com/npm/inflight/issues/5", "type": "Issue", "comment": ""}], "description": "In NPM `inflight` there is a Memory Leak because some resources are not freed correctly after being used. It appears to affect all versions, as the issue was not addressed and no fix is found. NOTE: In the meantime, `logdna-agent`, a package that depends on `inflight`, has merged a commit to address this solely in their package (so it should be fixed in `logdna-agent` in versions 1.6.5 and later). `Node-glob`, a package that also depends on `inflight`, was also planning to address this by not using `inflight` after version 8 is released, but it is still being used.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-inflight-1.0.6", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-772", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-frontend", "_project_name": "inmobi-glance/games-community-frontend"}, {"id": "CVE-2021-3803", "cveName": "CVE-2021-3803", "score": 7.5, "severity": "High", "publishDate": "2021-09-17T07:15:00", "references": ["https://github.com/advisories/GHSA-rp65-9cf3-cjxr", "https://github.com/fb55/nth-check/pull/9", "https://github.com/fb55/nth-check/commit/9894c1d2010870c351f66c6f6efcf656e26bb726", "https://huntr.dev/bounties/8cf8cc06-d2cf-4b4e-b42c-99fafb0b04d0/"], "referencesData": [{"url": "https://github.com/advisories/GHSA-rp65-9cf3-cjxr", "type": "Advisory", "comment": ""}, {"url": "https://github.com/fb55/nth-check/pull/9", "type": "Pull request", "comment": ""}, {"url": "https://github.com/fb55/nth-check/commit/9894c1d2010870c351f66c6f6efcf656e26bb726", "type": "Commit", "comment": ""}, {"url": "https://huntr.dev/bounties/8cf8cc06-d2cf-4b4e-b42c-99fafb0b04d0/", "type": "POC/Exploit", "comment": ""}], "description": "nth-check prior to 2.0.1 is vulnerable to Inefficient Regular Expression Complexity", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-nth-check-1.0.2", "similarityId": null, "fixResolutionText": "2.0.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-frontend", "_project_name": "inmobi-glance/games-community-frontend"}, {"id": "CVE-2023-44270", "cveName": "CVE-2023-44270", "score": 5.3, "severity": "Medium", "publishDate": "2023-09-29T10:44:00", "references": ["https://github.com/advisories/GHSA-7fh5-64p2-3v2j", "https://github.com/postcss/postcss/releases/tag/8.4.31", "https://github.com/postcss/postcss/commit/58cc860b4c1707510c9cd1bc1fa30b423a9ad6c5"], "referencesData": [{"url": "https://github.com/advisories/GHSA-7fh5-64p2-3v2j", "type": "Advisory", "comment": ""}, {"url": "https://github.com/postcss/postcss/releases/tag/8.4.31", "type": "Release Note", "comment": ""}, {"url": "https://github.com/postcss/postcss/commit/58cc860b4c1707510c9cd1bc1fa30b423a9ad6c5", "type": "Commit", "comment": ""}], "description": "An issue was discovered in postcss versions prior to 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being included in a comment.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-postcss-7.0.39", "similarityId": null, "fixResolutionText": "8.4.31", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-74", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-frontend", "_project_name": "inmobi-glance/games-community-frontend"}, {"id": "CVE-2019-16769", "cveName": "CVE-2019-16769", "score": 5.4, "severity": "Medium", "publishDate": "2019-12-05T19:15:00", "references": ["https://github.com/advisories/GHSA-h9rv-jmmf-4pgx", "https://www.npmjs.com/advisories/1426", "https://github.com/yahoo/serialize-javascript/commit/16a68ab53d9626fc7c942b48a1163108fcd184c8"], "referencesData": [{"url": "https://github.com/advisories/GHSA-h9rv-jmmf-4pgx", "type": "Advisory", "comment": ""}, {"url": "https://www.npmjs.com/advisories/1426", "type": "Advisory", "comment": ""}, {"url": "https://github.com/yahoo/serialize-javascript/commit/16a68ab53d9626fc7c942b48a1163108fcd184c8", "type": "Commit", "comment": ""}], "description": "The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of RegExp.prototype.toString() backslash-escapes all forward slashes in regular expressions. If serialized data of regular expression objects are used in an environment other than Node.js, it is affected by this vulnerability.", "cvss": {"score": 5.4, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 3.5, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": "6.8", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 5.4, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-serialize-javascript-1.9.1", "similarityId": null, "fixResolutionText": "3.1.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-79", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-frontend", "_project_name": "inmobi-glance/games-community-frontend"}, {"id": "CVE-2020-7660", "cveName": "CVE-2020-7660", "score": 8.1, "severity": "High", "publishDate": "2020-06-01T15:15:00", "references": ["https://github.com/yahoo/serialize-javascript/commit/f21a6fb3ace2353413761e79717b2d210ba6ccbd", "https://github.com/yahoo/serialize-javascript/pull/79", "https://github.com/advisories/GHSA-hxcc-f52p-wc94", "https://www.npmjs.com/advisories/1548"], "referencesData": [{"url": "https://github.com/yahoo/serialize-javascript/commit/f21a6fb3ace2353413761e79717b2d210ba6ccbd", "type": "Commit", "comment": ""}, {"url": "https://github.com/yahoo/serialize-javascript/pull/79", "type": "Pull request", "comment": ""}, {"url": "https://github.com/advisories/GHSA-hxcc-f52p-wc94", "type": "Advisory", "comment": ""}, {"url": "https://www.npmjs.com/advisories/1548", "type": "Advisory", "comment": ""}], "description": "serialize-javascript prior to 3.1.0 allows remote attackers to inject arbitrary code via the function \"deleteFunctions\" within \"index.js\".", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-serialize-javascript-1.9.1", "similarityId": null, "fixResolutionText": "3.1.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "games-community-frontend", "_project_name": "inmobi-glance/games-community-frontend"}, {"id": "CVE-2024-47764", "cveName": "CVE-2024-47764", "score": 5.3, "severity": "Medium", "publishDate": "2024-10-04T20:15:00", "references": ["https://github.com/advisories/GHSA-pxg6-pf52-xh8x", "https://github.com/jshttp/cookie/commit/e10042845354fea83bd8f34af72475eed1dadf5c", "https://github.com/jshttp/cookie/pull/167", "https://github.com/jshttp/cookie/releases/tag/v0.7.0", "https://github.com/jshttp/cookie/issues/165"], "referencesData": [{"url": "https://github.com/advisories/GHSA-pxg6-pf52-xh8x", "type": "Advisory", "comment": ""}, {"url": "https://github.com/jshttp/cookie/commit/e10042845354fea83bd8f34af72475eed1dadf5c", "type": "Commit", "comment": ""}, {"url": "https://github.com/jshttp/cookie/pull/167", "type": "Pull request", "comment": ""}, {"url": "https://github.com/jshttp/cookie/releases/tag/v0.7.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/jshttp/cookie/issues/165", "type": "Issue", "comment": ""}], "description": "The NPM package cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for \"path\" and \"domain\", which could be abused to alter other fields of the cookie. This vulnerability affects cookie package versions prior to 0.7.0. Users are advised to upgrade to a fixed version, which updates the validation for \"name\", \"path\", and \"domain\".", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-cookie-0.6.0", "similarityId": null, "fixResolutionText": "0.7.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-74", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aurora", "_project_name": "inmobi-glance/aurora"}, {"id": "CVE-2024-55565", "cveName": "CVE-2024-55565", "score": 6.3, "severity": "Medium", "publishDate": "2024-12-09T02:15:00", "references": ["https://github.com/advisories/GHSA-mwcw-c2x4-8c55", "https://github.com/ai/nanoid/pull/510", "https://github.com/ai/nanoid/commit/d643045f40d6dc8afa000a644d857da1436ed08c", "https://github.com/ai/nanoid/releases/tag/5.0.9"], "referencesData": [{"url": "https://github.com/advisories/GHSA-mwcw-c2x4-8c55", "type": "Advisory", "comment": ""}, {"url": "https://github.com/ai/nanoid/pull/510", "type": "Pull request", "comment": ""}, {"url": "https://github.com/ai/nanoid/commit/d643045f40d6dc8afa000a644d857da1436ed08c", "type": "Commit", "comment": ""}, {"url": "https://github.com/ai/nanoid/releases/tag/5.0.9", "type": "Release Note", "comment": ""}], "description": "The package nanoid versions through 3.3.7 and 4.0.0 through 5.0.8 mishandle non-integer values. ", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Npm-nanoid-3.3.7", "similarityId": null, "fixResolutionText": "3.3.8", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-835", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aurora", "_project_name": "inmobi-glance/aurora"}, {"id": "CVE-2023-32681", "cveName": "CVE-2023-32681", "score": 6.1, "severity": "Medium", "publishDate": "2023-05-26T13:00:00", "references": ["https://github.com/advisories/GHSA-j8r2-6x86-q33q", "https://github.com/psf/requests/releases/tag/v2.31.0", "https://github.com/psf/requests/commit/74ea7cf7a6a27a4eeb2ae24e162bcc942a6706d5"], "referencesData": [{"url": "https://github.com/advisories/GHSA-j8r2-6x86-q33q", "type": "Advisory", "comment": ""}, {"url": "https://github.com/psf/requests/releases/tag/v2.31.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/psf/requests/commit/74ea7cf7a6a27a4eeb2ae24e162bcc942a6706d5", "type": "Commit", "comment": ""}], "description": "Requests is a HTTP library. Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This is a product of how we use `rebuild_proxies` to reattach the `Proxy-Authorization` header to requests. For HTTP connections sent through the tunnel, the proxy will identify the header in the request itself and remove it prior to forwarding to the destination server. However when sent over HTTPS, the `Proxy-Authorization` header must be sent in the CONNECT request as the proxy has no visibility into the tunneled request. This results in Requests forwarding proxy credentials to the destination server unintentionally, allowing a malicious actor to potentially exfiltrate sensitive information. This issue affects versions 2.3.0 through 2.30.0.", "cvss": {"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-requests-2.26.0", "similarityId": null, "fixResolutionText": "2.32.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-200", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-aesthetic-ranking-service", "_project_name": "inmobi-glance/aip-surfaceart-aesthetic-ranking-service"}, {"id": "CVE-2024-35195", "cveName": "CVE-2024-35195", "score": 5.6, "severity": "Medium", "publishDate": "2024-05-20T21:15:00", "references": ["https://github.com/advisories/GHSA-9wx4-h78v-vm56", "https://github.com/psf/requests/pull/6655", "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac", "https://github.com/psf/requests/releases/tag/v2.32.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9wx4-h78v-vm56", "type": "Advisory", "comment": ""}, {"url": "https://github.com/psf/requests/pull/6655", "type": "Pull request", "comment": ""}, {"url": "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac", "type": "Commit", "comment": ""}, {"url": "https://github.com/psf/requests/releases/tag/v2.32.0", "type": "Release Note", "comment": ""}], "description": "Requests is an HTTP library. In the package requests versions prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. ", "cvss": {"score": 5.6, "attackVector": "LOCAL", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.6, "attackVector": "LOCAL", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-requests-2.26.0", "similarityId": null, "fixResolutionText": "2.32.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-670", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-aesthetic-ranking-service", "_project_name": "inmobi-glance/aip-surfaceart-aesthetic-ranking-service"}, {"id": "CVE-2024-47874", "cveName": "CVE-2024-47874", "score": 0.0, "severity": "None", "publishDate": "2024-10-15T16:15:05", "references": ["https://github.com/advisories/GHSA-f96h-pmfr-66vw", "https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733", "https://github.com/encode/starlette/releases/tag/0.40.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-f96h-pmfr-66vw", "type": "Advisory", "comment": ""}, {"url": "https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733", "type": "Commit", "comment": ""}, {"url": "https://github.com/encode/starlette/releases/tag/0.40.0", "type": "Release Note", "comment": ""}], "description": "Starlette is an Asynchronous Server Gateway Interface (ASGI) framework/toolkit. In starlette package version 0.4.1 through 0.39.2, Starlette treats `multipart/form-data` parts without a `filename` as text form fields and buffers those in byte strings with no size limit. This allows an attacker to upload arbitrary large form fields and causes Starlette to both slow down significantly due to excessive memory allocations and copy operations, and also consume more and more memory until the server starts swapping and grinds to a halt, or the OS terminates the server process with an OOM error. Uploading multiple such requests in parallel may be enough to render a service practically unusable, even if reasonable request size limits are enforced by a reverse proxy in front of Starlette. This Denial of Service (DoS) vulnerability affects all applications built with Starlette (or FastAPI) accepting form requests.", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Python-starlette-0.37.2", "similarityId": null, "fixResolutionText": "0.40.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-aesthetic-ranking-service", "_project_name": "inmobi-glance/aip-surfaceart-aesthetic-ranking-service"}, {"id": "CVE-2019-9423", "cveName": "CVE-2019-9423", "score": 7.8, "severity": "High", "publishDate": "2019-09-27T19:15:28", "references": ["https://github.com/advisories/GHSA-8849-5h85-98qw", "https://www.openwall.com/lists/oss-security/2019/11/07/1", "https://github.com/opencv/opencv/issues/20239", "https://source.android.com/security/bulletin/android-10"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8849-5h85-98qw", "type": "Advisory", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2019/11/07/1", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/opencv/opencv/issues/20239", "type": "Issue", "comment": ""}, {"url": "https://source.android.com/security/bulletin/android-10", "type": "Advisory", "comment": ""}], "description": "In opencv calls that use libpng, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616", "cvss": {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 4.6, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-contrib-python-4.9.0.80", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2019-9423", "cveName": "CVE-2019-9423", "score": 7.8, "severity": "High", "publishDate": "2019-09-27T19:15:28", "references": ["https://github.com/advisories/GHSA-8849-5h85-98qw", "https://www.openwall.com/lists/oss-security/2019/11/07/1", "https://github.com/opencv/opencv/issues/20239", "https://source.android.com/security/bulletin/android-10"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8849-5h85-98qw", "type": "Advisory", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2019/11/07/1", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/opencv/opencv/issues/20239", "type": "Issue", "comment": ""}, {"url": "https://source.android.com/security/bulletin/android-10", "type": "Advisory", "comment": ""}], "description": "In opencv calls that use libpng, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616", "cvss": {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 4.6, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.9.0.80", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2024-24762", "cveName": "CVE-2024-24762", "score": 7.5, "severity": "High", "publishDate": "2024-02-05T15:15:00", "references": ["https://github.com/advisories/GHSA-2jv5-9r88-3w3p", "https://github.com/Kludex/python-multipart/pull/75", "https://github.com/Kludex/python-multipart/commit/20f0ef6b4e4caf7d69a667c54dff57fe467109a4", "https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md#007-2024-02-03"], "referencesData": [{"url": "https://github.com/advisories/GHSA-2jv5-9r88-3w3p", "type": "Advisory", "comment": ""}, {"url": "https://github.com/Kludex/python-multipart/pull/75", "type": "Pull request", "comment": ""}, {"url": "https://github.com/Kludex/python-multipart/commit/20f0ef6b4e4caf7d69a667c54dff57fe467109a4", "type": "Commit", "comment": ""}, {"url": "https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md#007-2024-02-03", "type": "Release Note", "comment": ""}], "description": "`python-multipart` is a streaming multipart parser for Python. When using form data, `python-multipart` uses a Regular Expression to parse the HTTP `Content-Type` header, including options. An attacker could send a custom-made `Content-Type` option that is very difficult for the RegEx to process, consuming CPU resources and stalling indefinitely (minutes or more) while holding the main event loop. This means that the process can't handle any more requests, leading to regular expression denial of service. This issue affects versions prior to 0.0.7.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-python-multipart-0.0.6", "similarityId": null, "fixResolutionText": "0.0.18", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2024-53981", "cveName": "CVE-2024-53981", "score": 8.7, "severity": "High", "publishDate": "2024-12-02T05:36:00", "references": ["https://github.com/advisories/GHSA-59g5-xgcq-4qw3", "https://github.com/Kludex/python-multipart/commit/c4fe4d3cebc08c660e57dd709af1ffa7059b3177", "https://github.com/Kludex/python-multipart/pull/193", "https://github.com/Kludex/python-multipart/releases/tag/0.0.19", "https://github.com/Kludex/python-multipart/issues/192", "https://github.com/Kludex/python-multipart/releases/tag/0.0.18", "https://github.com/Kludex/python-multipart/pull/189", "https://github.com/Kludex/python-multipart/commit/9205a0ec8c646b9f705430a6bfb52bd957b76c19"], "referencesData": [{"url": "https://github.com/advisories/GHSA-59g5-xgcq-4qw3", "type": "Advisory", "comment": ""}, {"url": "https://github.com/Kludex/python-multipart/commit/c4fe4d3cebc08c660e57dd709af1ffa7059b3177", "type": "Commit", "comment": "Additional fix"}, {"url": "https://github.com/Kludex/python-multipart/pull/193", "type": "Pull request", "comment": "Additional Pull request"}, {"url": "https://github.com/Kludex/python-multipart/releases/tag/0.0.19", "type": "Release Note", "comment": "0.0.19"}, {"url": "https://github.com/Kludex/python-multipart/issues/192", "type": "Issue", "comment": ""}, {"url": "https://github.com/Kludex/python-multipart/releases/tag/0.0.18", "type": "Release Note", "comment": "0.0.18"}, {"url": "https://github.com/Kludex/python-multipart/pull/189", "type": "Pull request", "comment": "Initial Pull request"}, {"url": "https://github.com/Kludex/python-multipart/commit/9205a0ec8c646b9f705430a6bfb52bd957b76c19", "type": "Commit", "comment": "Initial fix"}], "description": "The python-multipart is a streaming multipart parser for Python. When parsing form data, python-multipart skips line breaks (CR \"\\r\" or LF \"\\n\") in front of the first boundary and any tailing bytes after the last boundary. This happens one byte at a time and emits a log event each time, which may cause excessive logging for certain inputs. An attacker could abuse this by sending a malicious request with lots of data before the first or after the last boundary, causing a high CPU load and stalling the processing thread for a significant amount of time. In the case of the ASGI application, this could stall the event loop and prevent other requests from being processed, resulting in a Denial of Service (DoS). This issue affects python-multipart versions prior to 0.0.18.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-python-multipart-0.0.6", "similarityId": null, "fixResolutionText": "0.0.18", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2024-47874", "cveName": "CVE-2024-47874", "score": 0.0, "severity": "None", "publishDate": "2024-10-15T16:15:05", "references": ["https://github.com/advisories/GHSA-f96h-pmfr-66vw", "https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733", "https://github.com/encode/starlette/releases/tag/0.40.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-f96h-pmfr-66vw", "type": "Advisory", "comment": ""}, {"url": "https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733", "type": "Commit", "comment": ""}, {"url": "https://github.com/encode/starlette/releases/tag/0.40.0", "type": "Release Note", "comment": ""}], "description": "Starlette is an Asynchronous Server Gateway Interface (ASGI) framework/toolkit. In starlette package version 0.4.1 through 0.39.2, Starlette treats `multipart/form-data` parts without a `filename` as text form fields and buffers those in byte strings with no size limit. This allows an attacker to upload arbitrary large form fields and causes Starlette to both slow down significantly due to excessive memory allocations and copy operations, and also consume more and more memory until the server starts swapping and grinds to a halt, or the OS terminates the server process with an OOM error. Uploading multiple such requests in parallel may be enough to render a service practically unusable, even if reasonable request size limits are enforced by a reverse proxy in front of Starlette. This Denial of Service (DoS) vulnerability affects all applications built with Starlette (or FastAPI) accepting form requests.", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Python-starlette-0.35.1", "similarityId": null, "fixResolutionText": "0.47.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-54121", "cveName": "CVE-2025-54121", "score": 5.3, "severity": "Medium", "publishDate": "2025-07-21T20:15:41", "references": ["https://github.com/advisories/GHSA-2c2j-9gv5-cj73", "https://github.com/encode/starlette/releases/tag/0.47.2", "https://github.com/encode/starlette/pull/2962", "https://github.com/encode/starlette/commit/9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1"], "referencesData": [{"url": "https://github.com/advisories/GHSA-2c2j-9gv5-cj73", "type": "Advisory", "comment": ""}, {"url": "https://github.com/encode/starlette/releases/tag/0.47.2", "type": "Release Note", "comment": ""}, {"url": "https://github.com/encode/starlette/pull/2962", "type": "Pull request", "comment": ""}, {"url": "https://github.com/encode/starlette/commit/9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1", "type": "Commit", "comment": ""}], "description": "Starlette is a lightweight ASGI (Asynchronous Server Gateway Interface) framework/toolkit, designed for building async web services in Python. In versions prior 0.47.2 , when parsing a multi-part form with large files (greater than the default max spool size) starlette will block the main thread to roll the file over to disk. This blocks the event thread which means the application can't accept new connections. The \"UploadFile\" code has a minor bug where instead of just checking for \"self._in_memory,\" the logic should also check if the additional bytes will cause a rollover.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-starlette-0.35.1", "similarityId": null, "fixResolutionText": "0.47.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-2999", "cveName": "CVE-2025-2999", "score": 4.8, "severity": "Medium", "publishDate": "2025-03-31T15:15:44", "references": ["https://github.com/advisories/GHSA-vgrw-7cvw-pwgx", "https://github.com/pytorch/pytorch/issues/149622", "https://github.com/pytorch/pytorch/blob/v2.6.0/torch/nn/utils/rnn.py#L574C1-L602C30"], "referencesData": [{"url": "https://github.com/advisories/GHSA-vgrw-7cvw-pwgx", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149622", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/v2.6.0/torch/nn/utils/rnn.py#L574C1-L602C30", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability was found in PyTorch 1.11.0 and after. Affected by this issue is the function \"torch.nn.utils.rnn.unpack_sequence\". The manipulation leads to Memory Corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.", "cvss": {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-torch-2.5.1", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-119", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-2148", "cveName": "CVE-2025-2148", "score": 2.3, "severity": "Low", "publishDate": "2025-03-10T12:15:12", "references": ["https://github.com/advisories/GHSA-c678-jfcj-6jmf", "https://github.com/pytorch/pytorch/issues/147722", "https://github.com/pytorch/pytorch/blob/bc11afd41fc68637000dcd9c14128c75d9361443/torch/csrc/autograd/record_function_ops.cpp#L141"], "referencesData": [{"url": "https://github.com/advisories/GHSA-c678-jfcj-6jmf", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/147722", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/bc11afd41fc68637000dcd9c14128c75d9361443/torch/csrc/autograd/record_function_ops.cpp#L141", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability was found in PyTorch versions 1.6.0 and after. Affected by this vulnerability is the function \"torch.ops.profiler._call_end_callbacks_on_jit_fut\" of the component Tuple Handler. The manipulation of the argument None leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 5.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "4.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-torch-2.5.1", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-119", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-2953", "cveName": "CVE-2025-2953", "score": 4.8, "severity": "Medium", "publishDate": "2025-03-30T16:15:14", "references": ["https://github.com/advisories/GHSA-3749-ghw9-m3mg", "https://github.com/pytorch/pytorch/issues/149274", "https://github.com/pytorch/pytorch/commit/6f327128a99debfb2312ee256523ad6b62f763d6", "https://github.com/pytorch/pytorch/pull/151848"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3749-ghw9-m3mg", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149274", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/commit/6f327128a99debfb2312ee256523ad6b62f763d6", "type": "Commit", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/pull/151848", "type": "Pull request", "comment": ""}], "description": "A vulnerability, which was classified as problematic, has been found in PyTorch. Affected by this issue is the function \"torch.mkldnn_max_pool2d\". The manipulation leads to Denial of Service (DoS). An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The issue affects pytorch versions prior to v2.7.1-rc1.", "cvss": {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 1.7, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-torch-2.5.1", "similarityId": null, "fixResolutionText": "2.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-404", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-2998", "cveName": "CVE-2025-2998", "score": 4.8, "severity": "Medium", "publishDate": "2025-03-31T14:15:20", "references": ["https://github.com/advisories/GHSA-f4hp-rmr7-r7v8", "https://github.com/pytorch/pytorch/issues/149622", "https://github.com/pytorch/pytorch/blob/9d6f0d5991de8e2bf96c9979aeb7258262259c00/torch/nn/utils/rnn.py#L339"], "referencesData": [{"url": "https://github.com/advisories/GHSA-f4hp-rmr7-r7v8", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149622", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/9d6f0d5991de8e2bf96c9979aeb7258262259c00/torch/nn/utils/rnn.py#L339", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability was found in PyTorch. It has been declared as critical. Affected by this vulnerability is the function `torch.nn.utils.rnn.pad_packed_sequence`. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.", "cvss": {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-torch-2.5.1", "similarityId": null, "fixResolutionText": "2.8.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-119", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-3000", "cveName": "CVE-2025-3000", "score": 4.8, "severity": "Medium", "publishDate": "2025-03-31T15:15:46", "references": ["https://github.com/advisories/GHSA-rrmf-rvhw-rf47", "https://github.com/pytorch/pytorch/issues/149623"], "referencesData": [{"url": "https://github.com/advisories/GHSA-rrmf-rvhw-rf47", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149623", "type": "Issue", "comment": ""}], "description": "A vulnerability classified as critical has been found in PyTorch. This affects the function \"torch.jit.script\". The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.", "cvss": {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-torch-2.5.1", "similarityId": null, "fixResolutionText": "2.8.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-119", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-3001", "cveName": "CVE-2025-3001", "score": 4.8, "severity": "Medium", "publishDate": "2025-03-31T16:15:27", "references": ["https://github.com/advisories/GHSA-qfhq-4f3w-5fph", "https://github.com/pytorch/pytorch/issues/149626", "https://github.com/pytorch/pytorch/blob/aec3ef100844631cb7c4ce2725157984eb9cebfe/aten/src/ATen/native/RNN.cpp#L1524"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qfhq-4f3w-5fph", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149626", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/aec3ef100844631cb7c4ce2725157984eb9cebfe/aten/src/ATen/native/RNN.cpp#L1524", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability classified as critical was found in PyTorch. This vulnerability affects the function \"torch.lstm_cell\". The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.", "cvss": {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-torch-2.5.1", "similarityId": null, "fixResolutionText": "2.8.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-119", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-3121", "cveName": "CVE-2025-3121", "score": 4.8, "severity": "Medium", "publishDate": "2025-04-02T22:15:21", "references": ["https://github.com/advisories/GHSA-qcc7-ch57-rh8j", "https://github.com/pytorch/pytorch/issues/149800", "https://github.com/pytorch/pytorch/blob/main/torch/jit/_serialization.py#L197C1-L202C79"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qcc7-ch57-rh8j", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149800", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/main/torch/jit/_serialization.py#L197C1-L202C79", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability classified as problematic has been found in PyTorch 1.12.0 and after. The function \"torch.jit.jit_module_from_flatbuffer\" is affected by this issue. The manipulation leads to Memory Corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.", "cvss": {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 1.7, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-torch-2.5.1", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-119", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-3136", "cveName": "CVE-2025-3136", "score": 4.8, "severity": "Medium", "publishDate": "2025-04-03T04:15:38", "references": ["https://github.com/advisories/GHSA-r37f-v2p6-x6cx", "https://github.com/pytorch/pytorch/issues/149821", "https://github.com/pytorch/pytorch/blob/b99e0c5412183c0516420dac123d096f4431909b/c10/cuda/CUDACachingAllocator.cpp#L3406"], "referencesData": [{"url": "https://github.com/advisories/GHSA-r37f-v2p6-x6cx", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149821", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/b99e0c5412183c0516420dac123d096f4431909b/c10/cuda/CUDACachingAllocator.cpp#L3406", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability, which was classified as problematic, has been found in PyTorch. This issue affects the function \"torch.cuda.memory.caching_allocator_delete\" of the file \"c10/cuda/CUDACachingAllocator.cpp\". The manipulation leads to Memory Corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.", "cvss": {"score": 3.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 1.7, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 3.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Python-torch-2.5.1", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-32434", "cveName": "CVE-2025-32434", "score": 9.3, "severity": "Critical", "publishDate": "2025-04-18T16:15:23", "references": ["https://github.com/advisories/GHSA-53q9-r3pm-6pq6", "https://pytorch.org/blog/pytorch2-6/", "https://github.com/pytorch/pytorch/pull/145020", "https://github.com/pytorch/pytorch/commit/0eda02a94c754e2256ff1701bcc03c40ece2bbef", "https://github.com/pytorch/pytorch/releases/tag/v2.6.0", "https://github.com/advisories/GHSA-ggpf-24jw-3fcw", "https://github.com/advisories/GHSA-m9mp-6x32-5rhg"], "referencesData": [{"url": "https://github.com/advisories/GHSA-53q9-r3pm-6pq6", "type": "Advisory", "comment": ""}, {"url": "https://pytorch.org/blog/pytorch2-6/", "type": "Release Note", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/pull/145020", "type": "Pull request", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/commit/0eda02a94c754e2256ff1701bcc03c40ece2bbef", "type": "Commit", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/releases/tag/v2.6.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/advisories/GHSA-ggpf-24jw-3fcw", "type": "Advisory", "comment": "Dependency package- vllm"}, {"url": "https://github.com/advisories/GHSA-m9mp-6x32-5rhg", "type": "Advisory", "comment": ""}], "description": "PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In versions prior to 2.6.0-rc7, a Remote Command Execution (RCE) vulnerability exists in PyTorch when loading a model using \"torch.load\" with \"weights_only=True\".", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Python-torch-2.5.1", "similarityId": null, "fixResolutionText": "2.6.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-3730", "cveName": "CVE-2025-3730", "score": 4.8, "severity": "Medium", "publishDate": "2025-04-16T21:15:48", "references": ["https://github.com/advisories/GHSA-887c-mr87-cxwp", "https://github.com/pytorch/pytorch/commit/01f226bfb8f2c343f5c614a6bbf685d91160f3af", "https://github.com/pytorch/pytorch/pull/150981", "https://github.com/pytorch/pytorch/issues/150835"], "referencesData": [{"url": "https://github.com/advisories/GHSA-887c-mr87-cxwp", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/commit/01f226bfb8f2c343f5c614a6bbf685d91160f3af", "type": "Commit", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/pull/150981", "type": "Pull request", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/150835", "type": "Issue", "comment": ""}], "description": "A vulnerability, classified as problematic, was found in PyTorch. The affected function is \"torch.nn.functional.ctc_loss\" in the file \"aten/src/ATen/native/LossCTC.cpp\". The manipulation leads to a denial of service. The attack must be conducted locally. The exploit has been publicly disclosed and may be used. It is recommended that a patch be applied to fix this issue. This issue affects version prior to 2.8.0-rc1.\n", "cvss": {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 1.7, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-torch-2.5.1", "similarityId": null, "fixResolutionText": "2.8.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-404", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-4287", "cveName": "CVE-2025-4287", "score": 4.8, "severity": "Medium", "publishDate": "2025-05-05T20:15:22", "references": ["https://github.com/advisories/GHSA-vw34-v45x-2c97", "https://github.com/pytorch/pytorch/issues/150836", "https://github.com/pytorch/pytorch/pull/150923", "https://github.com/pytorch/pytorch/blob/ff4515fde58d73dc0f7152dcbae7a89e48bb8899/torch/cuda/nccl.py#L82C1-L122C69"], "referencesData": [{"url": "https://github.com/advisories/GHSA-vw34-v45x-2c97", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/150836", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/pull/150923", "type": "Pull request", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/ff4515fde58d73dc0f7152dcbae7a89e48bb8899/torch/cuda/nccl.py#L82C1-L122C69", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability was found in pytorch versions 0.1.5 and after. It has been rated as problematic. Affected by this issue is the function `reduce` of the file `torch/cuda/nccl.py`. The manipulation leads to Denial of Service (DoS). It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The patch is identified as 5827d2061dcb4acd05ac5f8e65d8693a481ba0f5 in this \"Divigroup-RAP/PYTORCH\" forked repository", "cvss": {"score": 3.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 1.7, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 3.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Python-torch-2.5.1", "similarityId": null, "fixResolutionText": "2.8.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-404", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2024-11392", "cveName": "CVE-2024-11392", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-qxrp-vhvm-j765", "https://www.zerodayinitiative.com/advisories/ZDI-24-1513/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "https://github.com/huggingface/transformers/pull/35296"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qxrp-vhvm-j765", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1513/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}], "description": "transformers package is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of configuration files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-24322. This issue affects versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11393 and CVE-2024-11394.", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.42.4", "similarityId": null, "fixResolutionText": "4.53.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2024-11393", "cveName": "CVE-2024-11393", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-wrfc-pvp9-mr9g", "https://www.zerodayinitiative.com/advisories/ZDI-24-1514/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "https://github.com/huggingface/transformers/pull/35296"], "referencesData": [{"url": "https://github.com/advisories/GHSA-wrfc-pvp9-mr9g", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1514/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}], "description": "transformers package \"MaskFormer\" model is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-25191. This issue affects transformers versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11394 and CVE-2024-11392.", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.42.4", "similarityId": null, "fixResolutionText": "4.53.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2024-11394", "cveName": "CVE-2024-11394", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-hxxf-235m-72v3", "https://www.zerodayinitiative.com/advisories/ZDI-24-1515/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/pull/35296", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d"], "referencesData": [{"url": "https://github.com/advisories/GHSA-hxxf-235m-72v3", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1515/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}], "description": "transformers package \"Trax Model\" is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-25012. This issue affects versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11393 and CVE-2024-11392. ", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.42.4", "similarityId": null, "fixResolutionText": "4.53.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2024-12720", "cveName": "CVE-2024-12720", "score": 7.5, "severity": "High", "publishDate": "2025-03-20T10:15:29", "references": ["https://github.com/advisories/GHSA-6rvg-6v2m-4j46", "https://huntr.com/bounties/4bed1214-7835-4252-a853-22bbad891f98", "https://github.com/huggingface/transformers/pull/35264", "https://github.com/huggingface/transformers/commit/deac971c469bcbb182c2e52da0b82fb3bf54cccf"], "referencesData": [{"url": "https://github.com/advisories/GHSA-6rvg-6v2m-4j46", "type": "Advisory", "comment": ""}, {"url": "https://huntr.com/bounties/4bed1214-7835-4252-a853-22bbad891f98", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35264", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/deac971c469bcbb182c2e52da0b82fb3bf54cccf", "type": "Commit", "comment": ""}], "description": "A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the transformers library, specifically in the file \"tokenization_nougat_fast.py\". The vulnerability occurs in the \"post_process_single()\" function, where a regular expression processes specially crafted input. The issue stems from the regex exhibiting exponential time complexity under certain conditions, leading to excessive backtracking. This can result in significantly high CPU usage and potential application downtime, effectively creating a Denial of Service (DoS) scenario. The affected versions are versions 4.34.0 through 4.47.1.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.42.4", "similarityId": null, "fixResolutionText": "4.53.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-1194", "cveName": "CVE-2025-1194", "score": 6.5, "severity": "Medium", "publishDate": "2025-04-29T12:15:31", "references": ["https://github.com/advisories/GHSA-fpwr-67px-3qhx", "https://huntr.com/bounties/86f58dcd-683f-4adc-a735-849f51e9abb2", "https://github.com/huggingface/transformers/commit/92c5ca9dd70de3ade2af2eb835c96215cc50e815", "https://github.com/huggingface/transformers/pull/36121", "https://github.com/huggingface/transformers/releases/tag/v4.50.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-fpwr-67px-3qhx", "type": "Advisory", "comment": ""}, {"url": "https://huntr.com/bounties/86f58dcd-683f-4adc-a735-849f51e9abb2", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/92c5ca9dd70de3ade2af2eb835c96215cc50e815", "type": "Commit", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/36121", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/releases/tag/v4.50.0", "type": "Release Note", "comment": ""}], "description": "A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file \"tokenization_gpt_neox_japanese.py\" of the GPT-NeoX-Japanese model. The vulnerability occurs in the \"SubWordJapaneseTokenizer\" class, where regular expressions process specially crafted inputs. The issue stems from a regex exhibiting exponential complexity under certain conditions, leading to excessive backtracking. This can result in high CPU usage and potential application downtime, creating a Denial of Service (DoS) scenario. The issue affects transformers versions prior to 4.50.0.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-transformers-4.42.4", "similarityId": null, "fixResolutionText": "4.53.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-2099", "cveName": "CVE-2025-2099", "score": 7.5, "severity": "High", "publishDate": "2025-05-19T12:15:19", "references": ["https://github.com/advisories/GHSA-qq3j-4f4f-9583", "https://huntr.com/bounties/97b780f3-ffca-424f-ad5d-0e1c57a5bde4", "https://github.com/huggingface/transformers/pull/36648", "https://github.com/huggingface/transformers/commit/8cb522b4190bd556ce51be04942720650b1a3e57"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qq3j-4f4f-9583", "type": "Advisory", "comment": ""}, {"url": "https://huntr.com/bounties/97b780f3-ffca-424f-ad5d-0e1c57a5bde4", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/36648", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/8cb522b4190bd556ce51be04942720650b1a3e57", "type": "Commit", "comment": ""}], "description": "A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version through v4.49.0 allows for a Regular Expression Denial of Service (ReDoS) attack. The regular expression used to process code blocks in docstrings contains nested quantifiers, leading to exponential backtracking when processing input with a large number of newline characters. An attacker can exploit this by providing a specially crafted payload, causing high CPU usage and potential application downtime, effectively resulting in a Denial of Service (DoS) scenario.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.42.4", "similarityId": null, "fixResolutionText": "4.53.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-3263", "cveName": "CVE-2025-3263", "score": 5.3, "severity": "Medium", "publishDate": "2025-07-07T10:15:27", "references": ["https://github.com/advisories/GHSA-q2wp-rjmx-x6x9", "https://huntr.com/bounties/c7a69150-54f8-4e81-8094-791e7a2a0f29", "https://github.com/huggingface/transformers/releases/tag/v4.51.0", "https://github.com/huggingface/transformers/pull/36964", "https://github.com/huggingface/transformers/commit/126abe3461762e5fc180e7e614391d1b4ab051ca"], "referencesData": [{"url": "https://github.com/advisories/GHSA-q2wp-rjmx-x6x9", "type": "Advisory", "comment": ""}, {"url": "https://huntr.com/bounties/c7a69150-54f8-4e81-8094-791e7a2a0f29", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/releases/tag/v4.51.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/36964", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/126abe3461762e5fc180e7e614391d1b4ab051ca", "type": "Commit", "comment": ""}], "description": "A Regular Expression Denial Of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the \"get_configuration_file()\" function within the \"transformers.configuration_utils\" module. The affected version are v4.13.0 prior to v4.51.0. The vulnerability arises from the use of a regular expression pattern \"config\\.(.*)\\.json\" that can be exploited to cause excessive CPU consumption through crafted input strings, leading to catastrophic backtracking. This can result in model serving disruption, resource exhaustion, and increased latency in applications using the library.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-transformers-4.42.4", "similarityId": null, "fixResolutionText": "4.53.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-3264", "cveName": "CVE-2025-3264", "score": 5.3, "severity": "Medium", "publishDate": "2025-07-07T10:15:27", "references": ["https://github.com/advisories/GHSA-jjph-296x-mrcr", "https://github.com/huggingface/transformers/releases/tag/v4.51.0", "https://huntr.com/bounties/3c6f7822-9992-476d-8cf0-b0b1623427df", "https://github.com/huggingface/transformers/pull/36964", "https://github.com/huggingface/transformers/commit/126abe3461762e5fc180e7e614391d1b4ab051ca"], "referencesData": [{"url": "https://github.com/advisories/GHSA-jjph-296x-mrcr", "type": "Advisory", "comment": ""}, {"url": "https://github.com/huggingface/transformers/releases/tag/v4.51.0", "type": "Release Note", "comment": ""}, {"url": "https://huntr.com/bounties/3c6f7822-9992-476d-8cf0-b0b1623427df", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/36964", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/126abe3461762e5fc180e7e614391d1b4ab051ca", "type": "Commit", "comment": ""}], "description": "A Regular Expression Denial Of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the \"get_imports()\" function within \"dynamic_module_utils.py\". This vulnerability affects versions from 4.27.0 prior to v4.51.0. The issue arises from a regular expression pattern \"\\s*try\\s*:.*?except.*?:\" used to filter out \"try/except\" blocks from Python code, which can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. This vulnerability can lead to remote code loading disruption, resource exhaustion in model serving, supply chain attack vectors, and development pipeline disruption.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-transformers-4.42.4", "similarityId": null, "fixResolutionText": "4.53.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-3777", "cveName": "CVE-2025-3777", "score": 3.5, "severity": "Low", "publishDate": "2025-07-07T10:15:28", "references": ["https://github.com/advisories/GHSA-phhr-52qp-3mj4", "https://bugzilla.redhat.com/show_bug.cgi?id=2376775", "https://github.com/huggingface/transformers/pull/37523", "https://github.com/huggingface/transformers/commit/4f96081aadcdfd36d9a42580999ee3abf65b3ba3"], "referencesData": [{"url": "https://github.com/advisories/GHSA-phhr-52qp-3mj4", "type": "Advisory", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376775", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/37523", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/4f96081aadcdfd36d9a42580999ee3abf65b3ba3", "type": "Commit", "comment": ""}], "description": "Hugging Face Transformers versions prior to 4.52.0 are affected by an improper input validation vulnerability in the `image_utils.py` file. The vulnerability arises from insecure URL validation using the `startswith()` method, which can be bypassed through URL username injection. This allows attackers to craft URLs that appear to be from YouTube but resolve to malicious domains, potentially leading to phishing attacks, malware distribution, or data exfiltration.", "cvss": {"score": 3.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Python-transformers-4.42.4", "similarityId": null, "fixResolutionText": "4.53.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-601", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-3933", "cveName": "CVE-2025-3933", "score": 5.3, "severity": "Medium", "publishDate": "2025-07-11T10:15:22", "references": ["https://github.com/advisories/GHSA-37mw-44qp-f5jm", "https://huntr.com/bounties/25282953-5827-4384-bb6f-5790d275721b", "https://github.com/huggingface/transformers/pull/37788", "https://github.com/huggingface/transformers/commit/ebbe9b12dd75b69f92100d684c47f923ee262a93"], "referencesData": [{"url": "https://github.com/advisories/GHSA-37mw-44qp-f5jm", "type": "Advisory", "comment": ""}, {"url": "https://huntr.com/bounties/25282953-5827-4384-bb6f-5790d275721b", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/37788", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/ebbe9b12dd75b69f92100d684c47f923ee262a93", "type": "Commit", "comment": ""}], "description": "A Regular Expression Denial-of-Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the \"DonutProcessor\" class's \"token2json()\" method. This vulnerability affects versions through 4.51.3, and is fixed in version 4.52.0. The issue arises from the regex pattern \"\" which can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. This vulnerability can lead to service disruption, resource exhaustion, and potential API service vulnerabilities, impacting document processing tasks using the Donut model.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-transformers-4.42.4", "similarityId": null, "fixResolutionText": "4.53.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-5197", "cveName": "CVE-2025-5197", "score": 5.3, "severity": "Medium", "publishDate": "2025-08-06T12:15:26", "references": ["https://github.com/advisories/GHSA-9356-575x-2w9m", "https://huntr.com/bounties/3f8b3fd0-166b-46e7-b60f-60dd9d2678bf", "https://github.com/huggingface/transformers/commit/701caef704e356dc2f9331cc3fd5df0eccb4720a", "https://github.com/huggingface/transformers/releases/tag/v4.53.0", "https://github.com/huggingface/transformers/pull/38325"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9356-575x-2w9m", "type": "Advisory", "comment": ""}, {"url": "https://huntr.com/bounties/3f8b3fd0-166b-46e7-b60f-60dd9d2678bf", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/701caef704e356dc2f9331cc3fd5df0eccb4720a", "type": "Commit", "comment": ""}, {"url": "https://github.com/huggingface/transformers/releases/tag/v4.53.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/38325", "type": "Pull request", "comment": ""}], "description": "A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library, specifically in the `convert_tf_weight_name_to_pt_weight_name()` function. This function, responsible for converting TensorFlow weight names to PyTorch format, uses a regex pattern `/[^/]*___([^/]*)/` that can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. This issue can lead to service disruption, resource exhaustion, and potential API service vulnerabilities, impacting model conversion processes between TensorFlow and PyTorch formats. This issue affects the package transformers versions 2.0.0 through 4.52.4.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-transformers-4.42.4", "similarityId": null, "fixResolutionText": "4.53.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-6051", "cveName": "CVE-2025-6051", "score": 5.3, "severity": "Medium", "publishDate": "2025-09-14T17:15:34", "references": ["https://github.com/advisories/GHSA-rcv9-qm8p-9p6j", "https://github.com/huggingface/transformers/releases/tag/v4.53.0", "https://huntr.com/bounties/af929523-7b59-418a-bf55-301830b2ac9d", "https://github.com/huggingface/transformers/pull/38844", "https://github.com/huggingface/transformers/commit/54a02160eb030da9be18231c77791f2eb3a52216"], "referencesData": [{"url": "https://github.com/advisories/GHSA-rcv9-qm8p-9p6j", "type": "Advisory", "comment": ""}, {"url": "https://github.com/huggingface/transformers/releases/tag/v4.53.0", "type": "Release Note", "comment": ""}, {"url": "https://huntr.com/bounties/af929523-7b59-418a-bf55-301830b2ac9d", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/38844", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/54a02160eb030da9be18231c77791f2eb3a52216", "type": "Commit", "comment": ""}], "description": "A Regular Expression Denial Of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the `normalize_numbers()` method of the `EnglishNormalizer` class. This vulnerability affects versions 4.36.0 through 4.52.4. The issue arises from the method's handling of numeric strings, which can be exploited using crafted input strings containing long sequences of digits, leading to excessive CPU consumption. This vulnerability impacts text-to-speech and number normalization tasks, potentially causing service disruption, resource exhaustion, and API vulnerabilities. Issue has been patched in 4.53.0.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-transformers-4.42.4", "similarityId": null, "fixResolutionText": "4.53.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2025-6638", "cveName": "CVE-2025-6638", "score": 7.5, "severity": "High", "publishDate": "2025-09-12T11:15:31", "references": ["https://github.com/advisories/GHSA-59p9-h35m-wg4g", "https://github.com/huggingface/transformers/pull/39013", "https://github.com/huggingface/transformers/commit/d37f7517972f67e3f2194c000ed0f87f064e5099", "https://github.com/huggingface/transformers/releases/tag/v4.53.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-59p9-h35m-wg4g", "type": "Advisory", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/39013", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/d37f7517972f67e3f2194c000ed0f87f064e5099", "type": "Commit", "comment": ""}, {"url": "https://github.com/huggingface/transformers/releases/tag/v4.53.0", "type": "Release Note", "comment": ""}], "description": "A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically affecting the MarianTokenizer's `remove_language_code()` method. This vulnerability is present in versions through 4.52.4 and has been fixed in version 4.53.0. The issue arises from inefficient regex processing, which can be exploited by crafted input strings containing malformed language code patterns, leading to excessive CPU consumption and potential Denial of Service (DoS).", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.42.4", "similarityId": null, "fixResolutionText": "4.53.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-bald-converter-service", "_project_name": "inmobi-glance/aip-surfaceart-bald-converter-service"}, {"id": "CVE-2018-7712", "cveName": "CVE-2018-7712", "score": 7.5, "severity": "High", "publishDate": "2018-03-05T23:29:00", "references": ["https://github.com/opencv/opencv/issues/10998", "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "https://bugzilla.redhat.com/show_bug.cgi?id=1553467", "https://github.com/advisories/GHSA-vh8h-jg54-v92w"], "referencesData": [{"url": "https://github.com/opencv/opencv/issues/10998", "type": "Issue", "comment": ""}, {"url": "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "type": "POC/Exploit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553467", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-vh8h-jg54-v92w", "type": "Advisory", "comment": ""}], "description": "** DISPUTED ** The \"validateInputImageSize\" function in `modules/imgcodecs/src/loadsave.cpp` in OpenCV allows remote attackers to cause a denial of service (assertion failure) because \"(size.height <= (1<<20))\" may be false. Note: according to the maintainers, OpenCV `CV_Assert` is not an assertion (C-like \"assert()\"), it is a regular C++ exception which can be raised in case of invalid or non-supported parameters. ", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.11.0.86", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-617", "isViolatingPolicy": false, "type": "Disputed", "_repo_name": "aip-surfaceart-instantid-service", "_project_name": "inmobi-glance/aip-surfaceart-instantid-service"}, {"id": "CVE-2018-7713", "cveName": "CVE-2018-7713", "score": 7.5, "severity": "High", "publishDate": "2018-03-05T23:29:00", "references": ["https://github.com/opencv/opencv/issues/10998", "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "https://bugzilla.redhat.com/show_bug.cgi?id=1553469", "https://github.com/advisories/GHSA-wj8j-vmwr-jqc9"], "referencesData": [{"url": "https://github.com/opencv/opencv/issues/10998", "type": "Issue", "comment": ""}, {"url": "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "type": "POC/Exploit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553469", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-wj8j-vmwr-jqc9", "type": "Advisory", "comment": ""}], "description": "** DISPUTED ** The \"validateInputImageSize\" function in \"modules/imgcodecs/src/loadsave.cpp\" in OpenCV allows remote attackers to cause a denial of service (assertion failure) because \"size.width <= (1<<20)\" may be false. Note: OpenCV \"CV_Assert\" is not an assertion (C-like \"assert()\"), it is a regular C++ exception that can be raised in case of invalid or non-supported parameters.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.11.0.86", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-617", "isViolatingPolicy": false, "type": "Disputed", "_repo_name": "aip-surfaceart-instantid-service", "_project_name": "inmobi-glance/aip-surfaceart-instantid-service"}, {"id": "CVE-2024-11392", "cveName": "CVE-2024-11392", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-qxrp-vhvm-j765", "https://www.zerodayinitiative.com/advisories/ZDI-24-1513/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "https://github.com/huggingface/transformers/pull/35296"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qxrp-vhvm-j765", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1513/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}], "description": "transformers package is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of configuration files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-24322. This issue affects versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11393 and CVE-2024-11394.", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.37.1", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-instantid-service", "_project_name": "inmobi-glance/aip-surfaceart-instantid-service"}, {"id": "CVE-2024-11393", "cveName": "CVE-2024-11393", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-wrfc-pvp9-mr9g", "https://www.zerodayinitiative.com/advisories/ZDI-24-1514/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "https://github.com/huggingface/transformers/pull/35296"], "referencesData": [{"url": "https://github.com/advisories/GHSA-wrfc-pvp9-mr9g", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1514/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}], "description": "transformers package \"MaskFormer\" model is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-25191. This issue affects transformers versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11394 and CVE-2024-11392.", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.37.1", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-instantid-service", "_project_name": "inmobi-glance/aip-surfaceart-instantid-service"}, {"id": "CVE-2024-11394", "cveName": "CVE-2024-11394", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-hxxf-235m-72v3", "https://www.zerodayinitiative.com/advisories/ZDI-24-1515/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/pull/35296", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d"], "referencesData": [{"url": "https://github.com/advisories/GHSA-hxxf-235m-72v3", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1515/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}], "description": "transformers package \"Trax Model\" is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-25012. This issue affects versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11393 and CVE-2024-11392. ", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.37.1", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-instantid-service", "_project_name": "inmobi-glance/aip-surfaceart-instantid-service"}, {"id": "CVE-2024-3568", "cveName": "CVE-2024-3568", "score": 9.6, "severity": "Critical", "publishDate": "2024-04-10T17:15:58", "references": ["https://github.com/advisories/GHSA-37q5-v5qm-c9v8", "https://github.com/huggingface/transformers/pull/28926", "https://github.com/huggingface/transformers/commit/693667b8ac8138b83f8adb6522ddaf42fa07c125", "https://huntr.com/bounties/b3c36992-5264-4d7f-9906-a996efafba8f", "https://github.com/huggingface/transformers/releases/tag/v4.38.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-37q5-v5qm-c9v8", "type": "Advisory", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/28926", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/693667b8ac8138b83f8adb6522ddaf42fa07c125", "type": "Commit", "comment": ""}, {"url": "https://huntr.com/bounties/b3c36992-5264-4d7f-9906-a996efafba8f", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/releases/tag/v4.38.0", "type": "Release Note", "comment": ""}], "description": "The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine. This vulnerability affects transformers package versions 4.13.0 through 4.37.2.", "cvss": {"score": 9.6, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 9.6, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Python-transformers-4.37.1", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-instantid-service", "_project_name": "inmobi-glance/aip-surfaceart-instantid-service"}, {"id": "CVE-2018-7712", "cveName": "CVE-2018-7712", "score": 7.5, "severity": "High", "publishDate": "2018-03-05T23:29:00", "references": ["https://github.com/opencv/opencv/issues/10998", "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "https://bugzilla.redhat.com/show_bug.cgi?id=1553467", "https://github.com/advisories/GHSA-vh8h-jg54-v92w"], "referencesData": [{"url": "https://github.com/opencv/opencv/issues/10998", "type": "Issue", "comment": ""}, {"url": "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "type": "POC/Exploit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553467", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-vh8h-jg54-v92w", "type": "Advisory", "comment": ""}], "description": "** DISPUTED ** The \"validateInputImageSize\" function in `modules/imgcodecs/src/loadsave.cpp` in OpenCV allows remote attackers to cause a denial of service (assertion failure) because \"(size.height <= (1<<20))\" may be false. Note: according to the maintainers, OpenCV `CV_Assert` is not an assertion (C-like \"assert()\"), it is a regular C++ exception which can be raised in case of invalid or non-supported parameters. ", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.11.0.86", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-617", "isViolatingPolicy": false, "type": "Disputed", "_repo_name": "aip-surfaceart-midas-depth-service", "_project_name": "inmobi-glance/aip-surfaceart-midas-depth-service"}, {"id": "CVE-2018-7713", "cveName": "CVE-2018-7713", "score": 7.5, "severity": "High", "publishDate": "2018-03-05T23:29:00", "references": ["https://github.com/opencv/opencv/issues/10998", "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "https://bugzilla.redhat.com/show_bug.cgi?id=1553469", "https://github.com/advisories/GHSA-wj8j-vmwr-jqc9"], "referencesData": [{"url": "https://github.com/opencv/opencv/issues/10998", "type": "Issue", "comment": ""}, {"url": "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "type": "POC/Exploit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553469", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-wj8j-vmwr-jqc9", "type": "Advisory", "comment": ""}], "description": "** DISPUTED ** The \"validateInputImageSize\" function in \"modules/imgcodecs/src/loadsave.cpp\" in OpenCV allows remote attackers to cause a denial of service (assertion failure) because \"size.width <= (1<<20)\" may be false. Note: OpenCV \"CV_Assert\" is not an assertion (C-like \"assert()\"), it is a regular C++ exception that can be raised in case of invalid or non-supported parameters.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.11.0.86", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-617", "isViolatingPolicy": false, "type": "Disputed", "_repo_name": "aip-surfaceart-midas-depth-service", "_project_name": "inmobi-glance/aip-surfaceart-midas-depth-service"}, {"id": "CVE-2024-47874", "cveName": "CVE-2024-47874", "score": 0.0, "severity": "None", "publishDate": "2024-10-15T16:15:05", "references": ["https://github.com/advisories/GHSA-f96h-pmfr-66vw", "https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733", "https://github.com/encode/starlette/releases/tag/0.40.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-f96h-pmfr-66vw", "type": "Advisory", "comment": ""}, {"url": "https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733", "type": "Commit", "comment": ""}, {"url": "https://github.com/encode/starlette/releases/tag/0.40.0", "type": "Release Note", "comment": ""}], "description": "Starlette is an Asynchronous Server Gateway Interface (ASGI) framework/toolkit. In starlette package version 0.4.1 through 0.39.2, Starlette treats `multipart/form-data` parts without a `filename` as text form fields and buffers those in byte strings with no size limit. This allows an attacker to upload arbitrary large form fields and causes Starlette to both slow down significantly due to excessive memory allocations and copy operations, and also consume more and more memory until the server starts swapping and grinds to a halt, or the OS terminates the server process with an OOM error. Uploading multiple such requests in parallel may be enough to render a service practically unusable, even if reasonable request size limits are enforced by a reverse proxy in front of Starlette. This Denial of Service (DoS) vulnerability affects all applications built with Starlette (or FastAPI) accepting form requests.", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Python-starlette-0.37.2", "similarityId": null, "fixResolutionText": "0.40.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-midas-depth-service", "_project_name": "inmobi-glance/aip-surfaceart-midas-depth-service"}, {"id": "CVE-2024-11392", "cveName": "CVE-2024-11392", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-qxrp-vhvm-j765", "https://www.zerodayinitiative.com/advisories/ZDI-24-1513/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "https://github.com/huggingface/transformers/pull/35296"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qxrp-vhvm-j765", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1513/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}], "description": "transformers package is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of configuration files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-24322. This issue affects versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11393 and CVE-2024-11394.", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.37.1", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-midas-depth-service", "_project_name": "inmobi-glance/aip-surfaceart-midas-depth-service"}, {"id": "CVE-2024-11393", "cveName": "CVE-2024-11393", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-wrfc-pvp9-mr9g", "https://www.zerodayinitiative.com/advisories/ZDI-24-1514/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "https://github.com/huggingface/transformers/pull/35296"], "referencesData": [{"url": "https://github.com/advisories/GHSA-wrfc-pvp9-mr9g", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1514/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}], "description": "transformers package \"MaskFormer\" model is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-25191. This issue affects transformers versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11394 and CVE-2024-11392.", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.37.1", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-midas-depth-service", "_project_name": "inmobi-glance/aip-surfaceart-midas-depth-service"}, {"id": "CVE-2024-11394", "cveName": "CVE-2024-11394", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-hxxf-235m-72v3", "https://www.zerodayinitiative.com/advisories/ZDI-24-1515/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/pull/35296", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d"], "referencesData": [{"url": "https://github.com/advisories/GHSA-hxxf-235m-72v3", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1515/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}], "description": "transformers package \"Trax Model\" is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-25012. This issue affects versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11393 and CVE-2024-11392. ", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.37.1", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-midas-depth-service", "_project_name": "inmobi-glance/aip-surfaceart-midas-depth-service"}, {"id": "CVE-2024-3568", "cveName": "CVE-2024-3568", "score": 9.6, "severity": "Critical", "publishDate": "2024-04-10T17:15:58", "references": ["https://github.com/advisories/GHSA-37q5-v5qm-c9v8", "https://github.com/huggingface/transformers/pull/28926", "https://github.com/huggingface/transformers/commit/693667b8ac8138b83f8adb6522ddaf42fa07c125", "https://huntr.com/bounties/b3c36992-5264-4d7f-9906-a996efafba8f", "https://github.com/huggingface/transformers/releases/tag/v4.38.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-37q5-v5qm-c9v8", "type": "Advisory", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/28926", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/693667b8ac8138b83f8adb6522ddaf42fa07c125", "type": "Commit", "comment": ""}, {"url": "https://huntr.com/bounties/b3c36992-5264-4d7f-9906-a996efafba8f", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/releases/tag/v4.38.0", "type": "Release Note", "comment": ""}], "description": "The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine. This vulnerability affects transformers package versions 4.13.0 through 4.37.2.", "cvss": {"score": 9.6, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 9.6, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Python-transformers-4.37.1", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-midas-depth-service", "_project_name": "inmobi-glance/aip-surfaceart-midas-depth-service"}, {"id": "CVE-2024-48052", "cveName": "CVE-2024-48052", "score": 7.1, "severity": "High", "publishDate": "2024-11-04T23:15:04", "references": ["https://rumbling-slice-eb0.notion.site/FULL-SSRF-in-gr-DownloadButton-in-gradio-app-gradio-870b21e0908b48cbafd914719ac1a4e6?pvs=4", "https://github.com/advisories/GHSA-3gf9-wv65-gwh9", "https://gist.github.com/AfterSnows/45ffc23797f9127e00755376cc610e12"], "referencesData": [{"url": "https://rumbling-slice-eb0.notion.site/FULL-SSRF-in-gr-DownloadButton-in-gradio-app-gradio-870b21e0908b48cbafd914719ac1a4e6?pvs=4", "type": "Blog Post", "comment": ""}, {"url": "https://github.com/advisories/GHSA-3gf9-wv65-gwh9", "type": "Advisory", "comment": ""}, {"url": "https://gist.github.com/AfterSnows/45ffc23797f9127e00755376cc610e12", "type": "Disclosure", "comment": ""}], "description": "In gradio the \"gr.DownloadButton\" function has a hidden server-side request forgery (SSRF) vulnerability. The reason is that within the \"save_url_to_cache\" function, there are no restrictions on the URL, which allows access to local target resources. This can lead to the download of local resources and sensitive information.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-gradio-5.0.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-918", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-outpaint-service", "_project_name": "inmobi-glance/aip-surfaceart-outpaint-service"}, {"id": "CVE-2024-4940", "cveName": "CVE-2024-4940", "score": 6.1, "severity": "Medium", "publishDate": "2024-06-22T06:15:11", "references": ["https://github.com/advisories/GHSA-g6c9-f4xm-9j4x", "https://huntr.com/bounties/35aaea93-6895-4f03-9c1b-cd992665aa60", "https://github.com/gradio-app/gradio/blob/38963984800d58bfad81bc928f2d631cb4bac773/gradio/routes.py#L526"], "referencesData": [{"url": "https://github.com/advisories/GHSA-g6c9-f4xm-9j4x", "type": "Advisory", "comment": ""}, {"url": "https://huntr.com/bounties/35aaea93-6895-4f03-9c1b-cd992665aa60", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/gradio-app/gradio/blob/38963984800d58bfad81bc928f2d631cb4bac773/gradio/routes.py#L526", "type": "Vulnerable code", "comment": ""}], "description": "An Open Redirect vulnerability exists in the gradio-app/gradio, affecting the latest version. The vulnerability allows an attacker to redirect users to arbitrary websites, which can be exploited for phishing attacks, Cross-site Scripting (XSS), and Server-Side Request Forgery (SSRF), amongst others. This issue is due to improper validation of user-supplied input in the handling of URLs. Attackers can exploit this vulnerability by crafting a malicious URL that, when processed by the application, redirects the user to an attacker-controlled web page.", "cvss": {"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-gradio-5.0.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-601", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-outpaint-service", "_project_name": "inmobi-glance/aip-surfaceart-outpaint-service"}, {"id": "CVE-2024-51751", "cveName": "CVE-2024-51751", "score": 8.2, "severity": "High", "publishDate": "2024-11-06T20:15:05", "references": ["https://github.com/advisories/GHSA-rhm9-gp5p-5248", "https://github.com/gradio-app/gradio/releases/tag/gradio%405.5.0", "https://github.com/gradio-app/gradio/commit/dcfa7ad3e819002c0213a592ad726ccfd9e2bf0c", "https://github.com/gradio-app/gradio/pull/9898"], "referencesData": [{"url": "https://github.com/advisories/GHSA-rhm9-gp5p-5248", "type": "Advisory", "comment": ""}, {"url": "https://github.com/gradio-app/gradio/releases/tag/gradio%405.5.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/gradio-app/gradio/commit/dcfa7ad3e819002c0213a592ad726ccfd9e2bf0c", "type": "Commit", "comment": ""}, {"url": "https://github.com/gradio-app/gradio/pull/9898", "type": "Pull request", "comment": ""}], "description": "Gradio is an open-source Python package designed to enable quick builds of a demo or web application. If \"File\" or \"UploadButton\" components are used as a part of Gradio application to preview file content, an attacker with access to the application might abuse these components to read arbitrary files from the application server. There are no known workarounds for this vulnerability. This issue affects versions 4.0.1 through 5.4.0.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-gradio-5.0.0", "similarityId": null, "fixResolutionText": "5.5.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-22", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-outpaint-service", "_project_name": "inmobi-glance/aip-surfaceart-outpaint-service"}, {"id": "CVE-2025-23042", "cveName": "CVE-2025-23042", "score": 8.7, "severity": "High", "publishDate": "2025-01-14T19:15:44", "references": ["https://github.com/advisories/GHSA-j2jg-fq62-7c3h", "https://github.com/gradio-app/gradio/commit/6b63fdec441b5c9bf910f910a2505d8defbb6bf8", "https://github.com/gradio-app/gradio/pull/10304", "https://github.com/gradio-app/gradio/releases/tag/gradio%405.11.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-j2jg-fq62-7c3h", "type": "Advisory", "comment": ""}, {"url": "https://github.com/gradio-app/gradio/commit/6b63fdec441b5c9bf910f910a2505d8defbb6bf8", "type": "Commit", "comment": ""}, {"url": "https://github.com/gradio-app/gradio/pull/10304", "type": "Pull request", "comment": ""}, {"url": "https://github.com/gradio-app/gradio/releases/tag/gradio%405.11.0", "type": "Release Note", "comment": ""}], "description": "Gradio is an open-source Python package that allows quick building of demos and web applications for machine learning models, API, or any arbitrary Python function. Gradio's Access Control List (ACL) for file paths can be bypassed by altering the letter case of a blocked file or directory path. This vulnerability arises due to the lack of case normalization in the file path validation logic. On case-insensitive file systems, such as those used by Windows and macOS, this flaw enables attackers to circumvent security restrictions and access sensitive files that should be protected. This issue can lead to unauthorized data access, exposing sensitive information, and undermining the integrity of Gradio's security model. Given Gradio's popularity for building web applications, particularly in machine learning and AI, this vulnerability may pose a substantial threat if exploited in production environments. This issue affects the gradio versions prior to 5.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-gradio-5.0.0", "similarityId": null, "fixResolutionText": "5.11.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-285", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-outpaint-service", "_project_name": "inmobi-glance/aip-surfaceart-outpaint-service"}, {"id": "CVE-2019-9423", "cveName": "CVE-2019-9423", "score": 7.8, "severity": "High", "publishDate": "2019-09-27T19:15:28", "references": ["https://github.com/advisories/GHSA-8849-5h85-98qw", "https://www.openwall.com/lists/oss-security/2019/11/07/1", "https://github.com/opencv/opencv/issues/20239", "https://source.android.com/security/bulletin/android-10"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8849-5h85-98qw", "type": "Advisory", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2019/11/07/1", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/opencv/opencv/issues/20239", "type": "Issue", "comment": ""}, {"url": "https://source.android.com/security/bulletin/android-10", "type": "Advisory", "comment": ""}], "description": "In opencv calls that use libpng, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616", "cvss": {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 4.6, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-contrib-python-headless-4.10.0.84", "similarityId": null, "fixResolutionText": "4.11.0.86", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-outpaint-service", "_project_name": "inmobi-glance/aip-surfaceart-outpaint-service"}, {"id": "CVE-2018-7712", "cveName": "CVE-2018-7712", "score": 7.5, "severity": "High", "publishDate": "2018-03-05T23:29:00", "references": ["https://github.com/opencv/opencv/issues/10998", "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "https://bugzilla.redhat.com/show_bug.cgi?id=1553467", "https://github.com/advisories/GHSA-vh8h-jg54-v92w"], "referencesData": [{"url": "https://github.com/opencv/opencv/issues/10998", "type": "Issue", "comment": ""}, {"url": "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "type": "POC/Exploit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553467", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-vh8h-jg54-v92w", "type": "Advisory", "comment": ""}], "description": "** DISPUTED ** The \"validateInputImageSize\" function in `modules/imgcodecs/src/loadsave.cpp` in OpenCV allows remote attackers to cause a denial of service (assertion failure) because \"(size.height <= (1<<20))\" may be false. Note: according to the maintainers, OpenCV `CV_Assert` is not an assertion (C-like \"assert()\"), it is a regular C++ exception which can be raised in case of invalid or non-supported parameters. ", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.11.0.86", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-617", "isViolatingPolicy": false, "type": "Disputed", "_repo_name": "aip-surfaceart-outpaint-service", "_project_name": "inmobi-glance/aip-surfaceart-outpaint-service"}, {"id": "CVE-2018-7713", "cveName": "CVE-2018-7713", "score": 7.5, "severity": "High", "publishDate": "2018-03-05T23:29:00", "references": ["https://github.com/opencv/opencv/issues/10998", "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "https://bugzilla.redhat.com/show_bug.cgi?id=1553469", "https://github.com/advisories/GHSA-wj8j-vmwr-jqc9"], "referencesData": [{"url": "https://github.com/opencv/opencv/issues/10998", "type": "Issue", "comment": ""}, {"url": "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "type": "POC/Exploit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553469", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-wj8j-vmwr-jqc9", "type": "Advisory", "comment": ""}], "description": "** DISPUTED ** The \"validateInputImageSize\" function in \"modules/imgcodecs/src/loadsave.cpp\" in OpenCV allows remote attackers to cause a denial of service (assertion failure) because \"size.width <= (1<<20)\" may be false. Note: OpenCV \"CV_Assert\" is not an assertion (C-like \"assert()\"), it is a regular C++ exception that can be raised in case of invalid or non-supported parameters.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.11.0.86", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-617", "isViolatingPolicy": false, "type": "Disputed", "_repo_name": "aip-surfaceart-outpaint-service", "_project_name": "inmobi-glance/aip-surfaceart-outpaint-service"}, {"id": "CVE-2024-11392", "cveName": "CVE-2024-11392", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-qxrp-vhvm-j765", "https://www.zerodayinitiative.com/advisories/ZDI-24-1513/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "https://github.com/huggingface/transformers/pull/35296"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qxrp-vhvm-j765", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1513/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}], "description": "transformers package is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of configuration files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-24322. This issue affects versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11393 and CVE-2024-11394.", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.42.4", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-outpaint-service", "_project_name": "inmobi-glance/aip-surfaceart-outpaint-service"}, {"id": "CVE-2024-11393", "cveName": "CVE-2024-11393", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-wrfc-pvp9-mr9g", "https://www.zerodayinitiative.com/advisories/ZDI-24-1514/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "https://github.com/huggingface/transformers/pull/35296"], "referencesData": [{"url": "https://github.com/advisories/GHSA-wrfc-pvp9-mr9g", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1514/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}], "description": "transformers package \"MaskFormer\" model is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-25191. This issue affects transformers versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11394 and CVE-2024-11392.", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.42.4", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-outpaint-service", "_project_name": "inmobi-glance/aip-surfaceart-outpaint-service"}, {"id": "CVE-2024-11394", "cveName": "CVE-2024-11394", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-hxxf-235m-72v3", "https://www.zerodayinitiative.com/advisories/ZDI-24-1515/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/pull/35296", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d"], "referencesData": [{"url": "https://github.com/advisories/GHSA-hxxf-235m-72v3", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1515/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}], "description": "transformers package \"Trax Model\" is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-25012. This issue affects versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11393 and CVE-2024-11392. ", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.42.4", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-outpaint-service", "_project_name": "inmobi-glance/aip-surfaceart-outpaint-service"}, {"id": "CVE-2019-9423", "cveName": "CVE-2019-9423", "score": 7.8, "severity": "High", "publishDate": "2019-09-27T19:15:28", "references": ["https://github.com/advisories/GHSA-8849-5h85-98qw", "https://www.openwall.com/lists/oss-security/2019/11/07/1", "https://github.com/opencv/opencv/issues/20239", "https://source.android.com/security/bulletin/android-10"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8849-5h85-98qw", "type": "Advisory", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2019/11/07/1", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/opencv/opencv/issues/20239", "type": "Issue", "comment": ""}, {"url": "https://source.android.com/security/bulletin/android-10", "type": "Advisory", "comment": ""}], "description": "In opencv calls that use libpng, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616", "cvss": {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 4.6, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-contrib-python-headless-4.8.0.74", "similarityId": null, "fixResolutionText": "4.11.0.86", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-pri-service", "_project_name": "inmobi-glance/aip-surfaceart-pri-service"}, {"id": "CVE-2023-4863", "cveName": "CVE-2023-4863", "score": 8.8, "severity": "High", "publishDate": "2023-09-12T15:15:24", "references": ["https://github.com/advisories/GHSA-j7hp-h8jx-5ppr", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "https://bugzilla.redhat.com/show_bug.cgi?id=2238431", "https://github.com/webmproject/libwebp/releases/tag/v1.3.2", "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "https://blog.isosceles.com/the-webp-0day/", "https://github.com/advisories/GHSA-54xq-cgqr-rpm3", "https://github.com/advisories/GHSA-jh2j-j4j9-crg3", "https://github.com/advisories/GHSA-w2pj-9cgh-mq2c", "https://github.com/advisories/GHSA-qr4w-53vh-m672", "https://github.com/advisories/GHSA-cxjf-x6jp-p7mc", "https://github.com/opencv/opencv/commit/687fc11626901cff09d2b3b5f331fd59190ad4c7"], "referencesData": [{"url": "https://github.com/advisories/GHSA-j7hp-h8jx-5ppr", "type": "Advisory", "comment": ""}, {"url": "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "type": "Release Note", "comment": "Chrome"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238431", "type": "Issue", "comment": ""}, {"url": "https://github.com/webmproject/libwebp/releases/tag/v1.3.2", "type": "Release Note", "comment": "libwebp"}, {"url": "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "type": "Commit", "comment": ""}, {"url": "https://blog.isosceles.com/the-webp-0day/", "type": "Blog Post", "comment": ""}, {"url": "https://github.com/advisories/GHSA-54xq-cgqr-rpm3", "type": "Advisory", "comment": ""}, {"url": "https://github.com/advisories/GHSA-jh2j-j4j9-crg3", "type": "Advisory", "comment": "Dependency "}, {"url": "https://github.com/advisories/GHSA-w2pj-9cgh-mq2c", "type": "Advisory", "comment": "Dependency opencv-contrib-python-headless"}, {"url": "https://github.com/advisories/GHSA-qr4w-53vh-m672", "type": "Advisory", "comment": "Dependency opencv-python"}, {"url": "https://github.com/advisories/GHSA-cxjf-x6jp-p7mc", "type": "Advisory", "comment": "Dependency opencv-contrib-python"}, {"url": "https://github.com/opencv/opencv/commit/687fc11626901cff09d2b3b5f331fd59190ad4c7", "type": "Commit", "comment": "opencv"}], "description": "A Heap-Based Buffer Overflow vulnerability in \"libwebp\" in versions prior to 1.3.2 allows an attacker to perform an out-of-bounds memory write. \nThe vulnerability could be exploited by a remote attacker via a crafted HTML page, potentially leading to unauthorized code execution or a denial of service condition.\nTo exploit the vulnerability, the user must be able to manipulate the value in \"color_cache_bits\".\nThis package is used by various applications that are also affected if a vulnerable version of \"libwebp\" is in use, including Google Chrome in versions prior to 116.0.5845.187. ", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-contrib-python-headless-4.8.0.74", "similarityId": null, "fixResolutionText": "4.11.0.86", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-pri-service", "_project_name": "inmobi-glance/aip-surfaceart-pri-service"}, {"id": "CVE-2019-9423", "cveName": "CVE-2019-9423", "score": 7.8, "severity": "High", "publishDate": "2019-09-27T19:15:28", "references": ["https://github.com/advisories/GHSA-8849-5h85-98qw", "https://www.openwall.com/lists/oss-security/2019/11/07/1", "https://github.com/opencv/opencv/issues/20239", "https://source.android.com/security/bulletin/android-10"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8849-5h85-98qw", "type": "Advisory", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2019/11/07/1", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/opencv/opencv/issues/20239", "type": "Issue", "comment": ""}, {"url": "https://source.android.com/security/bulletin/android-10", "type": "Advisory", "comment": ""}], "description": "In opencv calls that use libpng, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616", "cvss": {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 4.6, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-headless-4.8.0.74", "similarityId": null, "fixResolutionText": "4.11.0.86", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-pri-service", "_project_name": "inmobi-glance/aip-surfaceart-pri-service"}, {"id": "CVE-2023-4863", "cveName": "CVE-2023-4863", "score": 8.8, "severity": "High", "publishDate": "2023-09-12T15:15:24", "references": ["https://github.com/advisories/GHSA-j7hp-h8jx-5ppr", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "https://bugzilla.redhat.com/show_bug.cgi?id=2238431", "https://github.com/webmproject/libwebp/releases/tag/v1.3.2", "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "https://blog.isosceles.com/the-webp-0day/", "https://github.com/advisories/GHSA-54xq-cgqr-rpm3", "https://github.com/advisories/GHSA-jh2j-j4j9-crg3", "https://github.com/advisories/GHSA-w2pj-9cgh-mq2c", "https://github.com/advisories/GHSA-qr4w-53vh-m672", "https://github.com/advisories/GHSA-cxjf-x6jp-p7mc", "https://github.com/opencv/opencv/commit/687fc11626901cff09d2b3b5f331fd59190ad4c7"], "referencesData": [{"url": "https://github.com/advisories/GHSA-j7hp-h8jx-5ppr", "type": "Advisory", "comment": ""}, {"url": "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "type": "Release Note", "comment": "Chrome"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238431", "type": "Issue", "comment": ""}, {"url": "https://github.com/webmproject/libwebp/releases/tag/v1.3.2", "type": "Release Note", "comment": "libwebp"}, {"url": "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "type": "Commit", "comment": ""}, {"url": "https://blog.isosceles.com/the-webp-0day/", "type": "Blog Post", "comment": ""}, {"url": "https://github.com/advisories/GHSA-54xq-cgqr-rpm3", "type": "Advisory", "comment": ""}, {"url": "https://github.com/advisories/GHSA-jh2j-j4j9-crg3", "type": "Advisory", "comment": "Dependency "}, {"url": "https://github.com/advisories/GHSA-w2pj-9cgh-mq2c", "type": "Advisory", "comment": "Dependency opencv-contrib-python-headless"}, {"url": "https://github.com/advisories/GHSA-qr4w-53vh-m672", "type": "Advisory", "comment": "Dependency opencv-python"}, {"url": "https://github.com/advisories/GHSA-cxjf-x6jp-p7mc", "type": "Advisory", "comment": "Dependency opencv-contrib-python"}, {"url": "https://github.com/opencv/opencv/commit/687fc11626901cff09d2b3b5f331fd59190ad4c7", "type": "Commit", "comment": "opencv"}], "description": "A Heap-Based Buffer Overflow vulnerability in \"libwebp\" in versions prior to 1.3.2 allows an attacker to perform an out-of-bounds memory write. \nThe vulnerability could be exploited by a remote attacker via a crafted HTML page, potentially leading to unauthorized code execution or a denial of service condition.\nTo exploit the vulnerability, the user must be able to manipulate the value in \"color_cache_bits\".\nThis package is used by various applications that are also affected if a vulnerable version of \"libwebp\" is in use, including Google Chrome in versions prior to 116.0.5845.187. ", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-headless-4.8.0.74", "similarityId": null, "fixResolutionText": "4.11.0.86", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-pri-service", "_project_name": "inmobi-glance/aip-surfaceart-pri-service"}, {"id": "CVE-2023-44271", "cveName": "CVE-2023-44271", "score": 7.5, "severity": "High", "publishDate": "2023-11-03T05:15:30", "references": ["https://advisory.checkmarx.net/advisory/CVE-2023-44271/", "https://github.com/advisories/GHSA-8ghj-p4vj-mr35", "https://github.com/python-pillow/Pillow/pull/7244", "https://github.com/python-pillow/Pillow/commit/e37b25087d39bd54495380a9898c8c7a2a4698d1"], "referencesData": [{"url": "https://advisory.checkmarx.net/advisory/CVE-2023-44271/", "type": "Advisory", "comment": ""}, {"url": "https://github.com/advisories/GHSA-8ghj-p4vj-mr35", "type": "Advisory", "comment": ""}, {"url": "https://github.com/python-pillow/Pillow/pull/7244", "type": "Pull request", "comment": ""}, {"url": "https://github.com/python-pillow/Pillow/commit/e37b25087d39bd54495380a9898c8c7a2a4698d1", "type": "Commit", "comment": ""}], "description": "An issue was discovered in Pillow prior to 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in \"ImageFont\" when textlength in an \"ImageDraw\" instance operates on a long text argument.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-Pillow-9.4.0", "similarityId": null, "fixResolutionText": "10.0.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-pri-service", "_project_name": "inmobi-glance/aip-surfaceart-pri-service"}, {"id": "CVE-2023-4863", "cveName": "CVE-2023-4863", "score": 8.8, "severity": "High", "publishDate": "2023-09-12T15:15:24", "references": ["https://github.com/advisories/GHSA-j7hp-h8jx-5ppr", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "https://bugzilla.redhat.com/show_bug.cgi?id=2238431", "https://github.com/webmproject/libwebp/releases/tag/v1.3.2", "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "https://blog.isosceles.com/the-webp-0day/", "https://github.com/advisories/GHSA-54xq-cgqr-rpm3", "https://github.com/advisories/GHSA-jh2j-j4j9-crg3", "https://github.com/advisories/GHSA-w2pj-9cgh-mq2c", "https://github.com/advisories/GHSA-qr4w-53vh-m672", "https://github.com/advisories/GHSA-cxjf-x6jp-p7mc", "https://github.com/opencv/opencv/commit/687fc11626901cff09d2b3b5f331fd59190ad4c7"], "referencesData": [{"url": "https://github.com/advisories/GHSA-j7hp-h8jx-5ppr", "type": "Advisory", "comment": ""}, {"url": "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "type": "Release Note", "comment": "Chrome"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238431", "type": "Issue", "comment": ""}, {"url": "https://github.com/webmproject/libwebp/releases/tag/v1.3.2", "type": "Release Note", "comment": "libwebp"}, {"url": "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "type": "Commit", "comment": ""}, {"url": "https://blog.isosceles.com/the-webp-0day/", "type": "Blog Post", "comment": ""}, {"url": "https://github.com/advisories/GHSA-54xq-cgqr-rpm3", "type": "Advisory", "comment": ""}, {"url": "https://github.com/advisories/GHSA-jh2j-j4j9-crg3", "type": "Advisory", "comment": "Dependency "}, {"url": "https://github.com/advisories/GHSA-w2pj-9cgh-mq2c", "type": "Advisory", "comment": "Dependency opencv-contrib-python-headless"}, {"url": "https://github.com/advisories/GHSA-qr4w-53vh-m672", "type": "Advisory", "comment": "Dependency opencv-python"}, {"url": "https://github.com/advisories/GHSA-cxjf-x6jp-p7mc", "type": "Advisory", "comment": "Dependency opencv-contrib-python"}, {"url": "https://github.com/opencv/opencv/commit/687fc11626901cff09d2b3b5f331fd59190ad4c7", "type": "Commit", "comment": "opencv"}], "description": "A Heap-Based Buffer Overflow vulnerability in \"libwebp\" in versions prior to 1.3.2 allows an attacker to perform an out-of-bounds memory write. \nThe vulnerability could be exploited by a remote attacker via a crafted HTML page, potentially leading to unauthorized code execution or a denial of service condition.\nTo exploit the vulnerability, the user must be able to manipulate the value in \"color_cache_bits\".\nThis package is used by various applications that are also affected if a vulnerable version of \"libwebp\" is in use, including Google Chrome in versions prior to 116.0.5845.187. ", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-Pillow-9.4.0", "similarityId": null, "fixResolutionText": "10.0.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-pri-service", "_project_name": "inmobi-glance/aip-surfaceart-pri-service"}, {"id": "CVE-2024-24575", "cveName": "CVE-2024-24575", "score": 7.5, "severity": "High", "publishDate": "2024-02-06T22:16:15", "references": ["https://github.com/libgit2/libgit2/security/advisories/GHSA-54mf-x2rh-hq9v", "https://github.com/libgit2/libgit2/pull/6730", "https://github.com/libgit2/libgit2/commit/d353cf4897c719a6e4bd7183747cb8e88ee0481d", "https://github.com/libgit2/libgit2/releases/tag/v1.7.2"], "referencesData": [{"url": "https://github.com/libgit2/libgit2/security/advisories/GHSA-54mf-x2rh-hq9v", "type": "Advisory", "comment": ""}, {"url": "https://github.com/libgit2/libgit2/pull/6730", "type": "Pull request", "comment": ""}, {"url": "https://github.com/libgit2/libgit2/commit/d353cf4897c719a6e4bd7183747cb8e88ee0481d", "type": "Commit", "comment": ""}, {"url": "https://github.com/libgit2/libgit2/releases/tag/v1.7.2", "type": "Release Note", "comment": ""}], "description": "The libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing you to build Git functionality into your application. Using well-crafted inputs to `git_revparse_single` can cause the function to enter an infinite loop, potentially causing a Denial of Service (DoS) attack in the calling application. The \"revparse\" function in `src/libgit2/revparse.c` uses a loop to parse the user-provided spec string. There is an edge case during parsing that allows a bad actor to force the loop conditions to access arbitrary memory. Potentially, this could also leak memory if the extracted rev spec is reflected back to the attacker. This issue affects libgit2 versions 1.4.0 through 1.6.4, and 1.7.0 through 1.7.1.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-pygit2-1.12.2", "similarityId": null, "fixResolutionText": "1.14.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-pri-service", "_project_name": "inmobi-glance/aip-surfaceart-pri-service"}, {"id": "CVE-2024-53981", "cveName": "CVE-2024-53981", "score": 8.7, "severity": "High", "publishDate": "2024-12-02T05:36:00", "references": ["https://github.com/advisories/GHSA-59g5-xgcq-4qw3", "https://github.com/Kludex/python-multipart/commit/c4fe4d3cebc08c660e57dd709af1ffa7059b3177", "https://github.com/Kludex/python-multipart/pull/193", "https://github.com/Kludex/python-multipart/releases/tag/0.0.19", "https://github.com/Kludex/python-multipart/issues/192", "https://github.com/Kludex/python-multipart/releases/tag/0.0.18", "https://github.com/Kludex/python-multipart/pull/189", "https://github.com/Kludex/python-multipart/commit/9205a0ec8c646b9f705430a6bfb52bd957b76c19"], "referencesData": [{"url": "https://github.com/advisories/GHSA-59g5-xgcq-4qw3", "type": "Advisory", "comment": ""}, {"url": "https://github.com/Kludex/python-multipart/commit/c4fe4d3cebc08c660e57dd709af1ffa7059b3177", "type": "Commit", "comment": "Additional fix"}, {"url": "https://github.com/Kludex/python-multipart/pull/193", "type": "Pull request", "comment": "Additional Pull request"}, {"url": "https://github.com/Kludex/python-multipart/releases/tag/0.0.19", "type": "Release Note", "comment": "0.0.19"}, {"url": "https://github.com/Kludex/python-multipart/issues/192", "type": "Issue", "comment": ""}, {"url": "https://github.com/Kludex/python-multipart/releases/tag/0.0.18", "type": "Release Note", "comment": "0.0.18"}, {"url": "https://github.com/Kludex/python-multipart/pull/189", "type": "Pull request", "comment": "Initial Pull request"}, {"url": "https://github.com/Kludex/python-multipart/commit/9205a0ec8c646b9f705430a6bfb52bd957b76c19", "type": "Commit", "comment": "Initial fix"}], "description": "The python-multipart is a streaming multipart parser for Python. When parsing form data, python-multipart skips line breaks (CR \"\\r\" or LF \"\\n\") in front of the first boundary and any tailing bytes after the last boundary. This happens one byte at a time and emits a log event each time, which may cause excessive logging for certain inputs. An attacker could abuse this by sending a malicious request with lots of data before the first or after the last boundary, causing a high CPU load and stalling the processing thread for a significant amount of time. In the case of the ASGI application, this could stall the event loop and prevent other requests from being processed, resulting in a Denial of Service (DoS). This issue affects python-multipart versions prior to 0.0.18.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-python-multipart-0.0.9", "similarityId": null, "fixResolutionText": "0.0.18", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-pri-service", "_project_name": "inmobi-glance/aip-surfaceart-pri-service"}, {"id": "CVE-2023-25399", "cveName": "CVE-2023-25399", "score": 5.5, "severity": "Medium", "publishDate": "2023-07-05T17:15:00", "references": ["https://github.com/advisories/GHSA-9jx5-6pgf-crrp", "http://www.square16.org/achievement/cve-2023-25399", "https://github.com/scipy/scipy/issues/16235", "https://github.com/scipy/scipy/pull/16397", "https://github.com/scipy/scipy/commit/9b6521198c4f31d3f9cb525e581bea8e3e77f0a2"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9jx5-6pgf-crrp", "type": "Advisory", "comment": ""}, {"url": "http://www.square16.org/achievement/cve-2023-25399", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/scipy/scipy/issues/16235", "type": "Issue", "comment": ""}, {"url": "https://github.com/scipy/scipy/pull/16397", "type": "Pull request", "comment": ""}, {"url": "https://github.com/scipy/scipy/commit/9b6521198c4f31d3f9cb525e581bea8e3e77f0a2", "type": "Commit", "comment": ""}], "description": "A refcounting issue which leads to potential memory leak was discovered in scipy in \"Py_FindObjects()\" function prior to versions v1.10.0rc1.", "cvss": {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-scipy-1.9.3", "similarityId": null, "fixResolutionText": "1.10.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-pri-service", "_project_name": "inmobi-glance/aip-surfaceart-pri-service"}, {"id": "CVE-2024-34062", "cveName": "CVE-2024-34062", "score": 4.8, "severity": "Medium", "publishDate": "2024-05-03T10:15:00", "references": ["https://github.com/advisories/GHSA-g7vv-2v7x-gj9p", "https://github.com/tqdm/tqdm/releases/tag/v4.66.3", "https://github.com/tqdm/tqdm/commit/4e613f84ed2ae029559f539464df83fa91feb316"], "referencesData": [{"url": "https://github.com/advisories/GHSA-g7vv-2v7x-gj9p", "type": "Advisory", "comment": ""}, {"url": "https://github.com/tqdm/tqdm/releases/tag/v4.66.3", "type": "Release Note", "comment": ""}, {"url": "https://github.com/tqdm/tqdm/commit/4e613f84ed2ae029559f539464df83fa91feb316", "type": "Commit", "comment": ""}], "description": "tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed through python's `eval`, allowing Arbitrary Code Execution. This issue is only locally exploitable. This issue affects tqdm versions 4.4.0 through 4.66.2. All users are advised to upgrade. There are no known workarounds for this vulnerability.", "cvss": {"score": 4.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-tqdm-4.64.1", "similarityId": null, "fixResolutionText": "4.66.3", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-74", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-pri-service", "_project_name": "inmobi-glance/aip-surfaceart-pri-service"}, {"id": "CVE-2024-11392", "cveName": "CVE-2024-11392", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-qxrp-vhvm-j765", "https://www.zerodayinitiative.com/advisories/ZDI-24-1513/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "https://github.com/huggingface/transformers/pull/35296"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qxrp-vhvm-j765", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1513/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}], "description": "transformers package is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of configuration files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-24322. This issue affects versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11393 and CVE-2024-11394.", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.37.1", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-pri-service", "_project_name": "inmobi-glance/aip-surfaceart-pri-service"}, {"id": "CVE-2024-11393", "cveName": "CVE-2024-11393", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-wrfc-pvp9-mr9g", "https://www.zerodayinitiative.com/advisories/ZDI-24-1514/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "https://github.com/huggingface/transformers/pull/35296"], "referencesData": [{"url": "https://github.com/advisories/GHSA-wrfc-pvp9-mr9g", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1514/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}], "description": "transformers package \"MaskFormer\" model is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-25191. This issue affects transformers versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11394 and CVE-2024-11392.", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.37.1", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-pri-service", "_project_name": "inmobi-glance/aip-surfaceart-pri-service"}, {"id": "CVE-2024-11394", "cveName": "CVE-2024-11394", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-hxxf-235m-72v3", "https://www.zerodayinitiative.com/advisories/ZDI-24-1515/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/pull/35296", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d"], "referencesData": [{"url": "https://github.com/advisories/GHSA-hxxf-235m-72v3", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1515/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}], "description": "transformers package \"Trax Model\" is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-25012. This issue affects versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11393 and CVE-2024-11392. ", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.37.1", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-pri-service", "_project_name": "inmobi-glance/aip-surfaceart-pri-service"}, {"id": "CVE-2024-3568", "cveName": "CVE-2024-3568", "score": 9.6, "severity": "Critical", "publishDate": "2024-04-10T17:15:58", "references": ["https://github.com/advisories/GHSA-37q5-v5qm-c9v8", "https://github.com/huggingface/transformers/pull/28926", "https://github.com/huggingface/transformers/commit/693667b8ac8138b83f8adb6522ddaf42fa07c125", "https://huntr.com/bounties/b3c36992-5264-4d7f-9906-a996efafba8f", "https://github.com/huggingface/transformers/releases/tag/v4.38.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-37q5-v5qm-c9v8", "type": "Advisory", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/28926", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/693667b8ac8138b83f8adb6522ddaf42fa07c125", "type": "Commit", "comment": ""}, {"url": "https://huntr.com/bounties/b3c36992-5264-4d7f-9906-a996efafba8f", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/releases/tag/v4.38.0", "type": "Release Note", "comment": ""}], "description": "The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine. This vulnerability affects transformers package versions 4.13.0 through 4.37.2.", "cvss": {"score": 9.6, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 9.6, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Python-transformers-4.37.1", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-pri-service", "_project_name": "inmobi-glance/aip-surfaceart-pri-service"}, {"id": "CVE-2018-7712", "cveName": "CVE-2018-7712", "score": 7.5, "severity": "High", "publishDate": "2018-03-05T23:29:00", "references": ["https://github.com/opencv/opencv/issues/10998", "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "https://bugzilla.redhat.com/show_bug.cgi?id=1553467", "https://github.com/advisories/GHSA-vh8h-jg54-v92w"], "referencesData": [{"url": "https://github.com/opencv/opencv/issues/10998", "type": "Issue", "comment": ""}, {"url": "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "type": "POC/Exploit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553467", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-vh8h-jg54-v92w", "type": "Advisory", "comment": ""}], "description": "** DISPUTED ** The \"validateInputImageSize\" function in `modules/imgcodecs/src/loadsave.cpp` in OpenCV allows remote attackers to cause a denial of service (assertion failure) because \"(size.height <= (1<<20))\" may be false. Note: according to the maintainers, OpenCV `CV_Assert` is not an assertion (C-like \"assert()\"), it is a regular C++ exception which can be raised in case of invalid or non-supported parameters. ", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.11.0.86", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-617", "isViolatingPolicy": false, "type": "Disputed", "_repo_name": "aip-surfaceart-reactor-service", "_project_name": "inmobi-glance/aip-surfaceart-reactor-service"}, {"id": "CVE-2018-7713", "cveName": "CVE-2018-7713", "score": 7.5, "severity": "High", "publishDate": "2018-03-05T23:29:00", "references": ["https://github.com/opencv/opencv/issues/10998", "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "https://bugzilla.redhat.com/show_bug.cgi?id=1553469", "https://github.com/advisories/GHSA-wj8j-vmwr-jqc9"], "referencesData": [{"url": "https://github.com/opencv/opencv/issues/10998", "type": "Issue", "comment": ""}, {"url": "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "type": "POC/Exploit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553469", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-wj8j-vmwr-jqc9", "type": "Advisory", "comment": ""}], "description": "** DISPUTED ** The \"validateInputImageSize\" function in \"modules/imgcodecs/src/loadsave.cpp\" in OpenCV allows remote attackers to cause a denial of service (assertion failure) because \"size.width <= (1<<20)\" may be false. Note: OpenCV \"CV_Assert\" is not an assertion (C-like \"assert()\"), it is a regular C++ exception that can be raised in case of invalid or non-supported parameters.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.11.0.86", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-617", "isViolatingPolicy": false, "type": "Disputed", "_repo_name": "aip-surfaceart-reactor-service", "_project_name": "inmobi-glance/aip-surfaceart-reactor-service"}, {"id": "CVE-2024-1135", "cveName": "CVE-2024-1135", "score": 7.5, "severity": "High", "publishDate": "2024-04-16T00:15:00", "references": ["https://github.com/advisories/GHSA-w3h3-4rj7-4ph4", "https://huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1", "https://github.com/benoitc/gunicorn/releases/tag/22.0.0", "https://github.com/benoitc/gunicorn/pull/3113", "https://github.com/benoitc/gunicorn/commit/ac29c9b0a758d21f1e0fb3b3457239e523fa9f1d"], "referencesData": [{"url": "https://github.com/advisories/GHSA-w3h3-4rj7-4ph4", "type": "Advisory", "comment": ""}, {"url": "https://huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/benoitc/gunicorn/releases/tag/22.0.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/benoitc/gunicorn/pull/3113", "type": "Pull request", "comment": ""}, {"url": "https://github.com/benoitc/gunicorn/commit/ac29c9b0a758d21f1e0fb3b3457239e523fa9f1d", "type": "Commit", "comment": ""}], "description": "Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure. This vulnerability affects gunicorn package versions 0.10.0 through 21.2.0.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-gunicorn-20.1.0", "similarityId": null, "fixResolutionText": "22.0.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-444", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-reverse-search-service", "_project_name": "inmobi-glance/aip-surfaceart-reverse-search-service"}, {"id": "CVE-2023-44271", "cveName": "CVE-2023-44271", "score": 7.5, "severity": "High", "publishDate": "2023-11-03T05:15:30", "references": ["https://advisory.checkmarx.net/advisory/CVE-2023-44271/", "https://github.com/advisories/GHSA-8ghj-p4vj-mr35", "https://github.com/python-pillow/Pillow/pull/7244", "https://github.com/python-pillow/Pillow/commit/e37b25087d39bd54495380a9898c8c7a2a4698d1"], "referencesData": [{"url": "https://advisory.checkmarx.net/advisory/CVE-2023-44271/", "type": "Advisory", "comment": ""}, {"url": "https://github.com/advisories/GHSA-8ghj-p4vj-mr35", "type": "Advisory", "comment": ""}, {"url": "https://github.com/python-pillow/Pillow/pull/7244", "type": "Pull request", "comment": ""}, {"url": "https://github.com/python-pillow/Pillow/commit/e37b25087d39bd54495380a9898c8c7a2a4698d1", "type": "Commit", "comment": ""}], "description": "An issue was discovered in Pillow prior to 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in \"ImageFont\" when textlength in an \"ImageDraw\" instance operates on a long text argument.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-Pillow-9.5.0", "similarityId": null, "fixResolutionText": "10.0.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-reverse-search-service", "_project_name": "inmobi-glance/aip-surfaceart-reverse-search-service"}, {"id": "CVE-2023-4863", "cveName": "CVE-2023-4863", "score": 8.8, "severity": "High", "publishDate": "2023-09-12T15:15:24", "references": ["https://github.com/advisories/GHSA-j7hp-h8jx-5ppr", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "https://bugzilla.redhat.com/show_bug.cgi?id=2238431", "https://github.com/webmproject/libwebp/releases/tag/v1.3.2", "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "https://blog.isosceles.com/the-webp-0day/", "https://github.com/advisories/GHSA-54xq-cgqr-rpm3", "https://github.com/advisories/GHSA-jh2j-j4j9-crg3", "https://github.com/advisories/GHSA-w2pj-9cgh-mq2c", "https://github.com/advisories/GHSA-qr4w-53vh-m672", "https://github.com/advisories/GHSA-cxjf-x6jp-p7mc", "https://github.com/opencv/opencv/commit/687fc11626901cff09d2b3b5f331fd59190ad4c7"], "referencesData": [{"url": "https://github.com/advisories/GHSA-j7hp-h8jx-5ppr", "type": "Advisory", "comment": ""}, {"url": "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "type": "Release Note", "comment": "Chrome"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238431", "type": "Issue", "comment": ""}, {"url": "https://github.com/webmproject/libwebp/releases/tag/v1.3.2", "type": "Release Note", "comment": "libwebp"}, {"url": "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "type": "Commit", "comment": ""}, {"url": "https://blog.isosceles.com/the-webp-0day/", "type": "Blog Post", "comment": ""}, {"url": "https://github.com/advisories/GHSA-54xq-cgqr-rpm3", "type": "Advisory", "comment": ""}, {"url": "https://github.com/advisories/GHSA-jh2j-j4j9-crg3", "type": "Advisory", "comment": "Dependency "}, {"url": "https://github.com/advisories/GHSA-w2pj-9cgh-mq2c", "type": "Advisory", "comment": "Dependency opencv-contrib-python-headless"}, {"url": "https://github.com/advisories/GHSA-qr4w-53vh-m672", "type": "Advisory", "comment": "Dependency opencv-python"}, {"url": "https://github.com/advisories/GHSA-cxjf-x6jp-p7mc", "type": "Advisory", "comment": "Dependency opencv-contrib-python"}, {"url": "https://github.com/opencv/opencv/commit/687fc11626901cff09d2b3b5f331fd59190ad4c7", "type": "Commit", "comment": "opencv"}], "description": "A Heap-Based Buffer Overflow vulnerability in \"libwebp\" in versions prior to 1.3.2 allows an attacker to perform an out-of-bounds memory write. \nThe vulnerability could be exploited by a remote attacker via a crafted HTML page, potentially leading to unauthorized code execution or a denial of service condition.\nTo exploit the vulnerability, the user must be able to manipulate the value in \"color_cache_bits\".\nThis package is used by various applications that are also affected if a vulnerable version of \"libwebp\" is in use, including Google Chrome in versions prior to 116.0.5845.187. ", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-Pillow-9.5.0", "similarityId": null, "fixResolutionText": "10.0.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-reverse-search-service", "_project_name": "inmobi-glance/aip-surfaceart-reverse-search-service"}, {"id": "CVE-2023-32681", "cveName": "CVE-2023-32681", "score": 6.1, "severity": "Medium", "publishDate": "2023-05-26T13:00:00", "references": ["https://github.com/advisories/GHSA-j8r2-6x86-q33q", "https://github.com/psf/requests/releases/tag/v2.31.0", "https://github.com/psf/requests/commit/74ea7cf7a6a27a4eeb2ae24e162bcc942a6706d5"], "referencesData": [{"url": "https://github.com/advisories/GHSA-j8r2-6x86-q33q", "type": "Advisory", "comment": ""}, {"url": "https://github.com/psf/requests/releases/tag/v2.31.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/psf/requests/commit/74ea7cf7a6a27a4eeb2ae24e162bcc942a6706d5", "type": "Commit", "comment": ""}], "description": "Requests is a HTTP library. Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This is a product of how we use `rebuild_proxies` to reattach the `Proxy-Authorization` header to requests. For HTTP connections sent through the tunnel, the proxy will identify the header in the request itself and remove it prior to forwarding to the destination server. However when sent over HTTPS, the `Proxy-Authorization` header must be sent in the CONNECT request as the proxy has no visibility into the tunneled request. This results in Requests forwarding proxy credentials to the destination server unintentionally, allowing a malicious actor to potentially exfiltrate sensitive information. This issue affects versions 2.3.0 through 2.30.0.", "cvss": {"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-requests-2.26.0", "similarityId": null, "fixResolutionText": "2.32.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-200", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-reverse-search-service", "_project_name": "inmobi-glance/aip-surfaceart-reverse-search-service"}, {"id": "CVE-2024-35195", "cveName": "CVE-2024-35195", "score": 5.6, "severity": "Medium", "publishDate": "2024-05-20T21:15:00", "references": ["https://github.com/advisories/GHSA-9wx4-h78v-vm56", "https://github.com/psf/requests/pull/6655", "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac", "https://github.com/psf/requests/releases/tag/v2.32.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9wx4-h78v-vm56", "type": "Advisory", "comment": ""}, {"url": "https://github.com/psf/requests/pull/6655", "type": "Pull request", "comment": ""}, {"url": "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac", "type": "Commit", "comment": ""}, {"url": "https://github.com/psf/requests/releases/tag/v2.32.0", "type": "Release Note", "comment": ""}], "description": "Requests is an HTTP library. In the package requests versions prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. ", "cvss": {"score": 5.6, "attackVector": "LOCAL", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.6, "attackVector": "LOCAL", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-requests-2.26.0", "similarityId": null, "fixResolutionText": "2.32.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-670", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-reverse-search-service", "_project_name": "inmobi-glance/aip-surfaceart-reverse-search-service"}, {"id": "CVE-2024-47874", "cveName": "CVE-2024-47874", "score": 0.0, "severity": "None", "publishDate": "2024-10-15T16:15:05", "references": ["https://github.com/advisories/GHSA-f96h-pmfr-66vw", "https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733", "https://github.com/encode/starlette/releases/tag/0.40.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-f96h-pmfr-66vw", "type": "Advisory", "comment": ""}, {"url": "https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733", "type": "Commit", "comment": ""}, {"url": "https://github.com/encode/starlette/releases/tag/0.40.0", "type": "Release Note", "comment": ""}], "description": "Starlette is an Asynchronous Server Gateway Interface (ASGI) framework/toolkit. In starlette package version 0.4.1 through 0.39.2, Starlette treats `multipart/form-data` parts without a `filename` as text form fields and buffers those in byte strings with no size limit. This allows an attacker to upload arbitrary large form fields and causes Starlette to both slow down significantly due to excessive memory allocations and copy operations, and also consume more and more memory until the server starts swapping and grinds to a halt, or the OS terminates the server process with an OOM error. Uploading multiple such requests in parallel may be enough to render a service practically unusable, even if reasonable request size limits are enforced by a reverse proxy in front of Starlette. This Denial of Service (DoS) vulnerability affects all applications built with Starlette (or FastAPI) accepting form requests.", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Python-starlette-0.37.2", "similarityId": null, "fixResolutionText": "0.40.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-reverse-search-service", "_project_name": "inmobi-glance/aip-surfaceart-reverse-search-service"}, {"id": "CVE-2024-42367", "cveName": "CVE-2024-42367", "score": 6.3, "severity": "Medium", "publishDate": "2024-08-12T13:38:34", "references": ["https://github.com/advisories/GHSA-jwhx-xcg6-8xhj", "https://github.com/aio-libs/aiohttp/commit/ce2e9758814527589b10759a20783fb03b98339f", "https://github.com/aio-libs/aiohttp/pull/8652", "https://github.com/aio-libs/aiohttp/releases/tag/v3.10.2"], "referencesData": [{"url": "https://github.com/advisories/GHSA-jwhx-xcg6-8xhj", "type": "Advisory", "comment": ""}, {"url": "https://github.com/aio-libs/aiohttp/commit/ce2e9758814527589b10759a20783fb03b98339f", "type": "Commit", "comment": ""}, {"url": "https://github.com/aio-libs/aiohttp/pull/8652", "type": "Pull request", "comment": ""}, {"url": "https://github.com/aio-libs/aiohttp/releases/tag/v3.10.2", "type": "Release Note", "comment": ""}], "description": "The aiohttp package is an asynchronous HTTP client/server framework for asyncio and Python. Static routes that contain files with compressed variants (\".gz\" or \".br\" extension) are vulnerable to path traversal outside the root directory if those variants are symbolic links. The server protects static routes from path traversal outside the root directory when \"follow_symlinks=False\" (default). It does this by resolving the requested URL to an absolute path and then checking that path relative to the root. However, these checks are not performed when looking for compressed variants in the \"FileResponse\" class, and symbolic links are then automatically followed when performing the \"Path.stat()\" and \"Path.open()\" to send the file. This vulnerability affects versions prior to 3.10.2.", "cvss": {"score": 4.8, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.8, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-aiohttp-3.9.5", "similarityId": null, "fixResolutionText": "3.12.14", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-61", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2024-52304", "cveName": "CVE-2024-52304", "score": 6.3, "severity": "Medium", "publishDate": "2024-11-18T21:15:06", "references": ["https://github.com/advisories/GHSA-8495-4g3g-x7pr", "https://github.com/aio-libs/aiohttp/pull/9851", "https://github.com/aio-libs/aiohttp/commit/541d86d9e7884590c655876cd40042565293d8df", "https://github.com/aio-libs/aiohttp/releases/tag/v3.10.11"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8495-4g3g-x7pr", "type": "Advisory", "comment": ""}, {"url": "https://github.com/aio-libs/aiohttp/pull/9851", "type": "Pull request", "comment": ""}, {"url": "https://github.com/aio-libs/aiohttp/commit/541d86d9e7884590c655876cd40042565293d8df", "type": "Commit", "comment": ""}, {"url": "https://github.com/aio-libs/aiohttp/releases/tag/v3.10.11", "type": "Release Note", "comment": ""}], "description": "The package aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. The Python parser parses newlines in chunk extensions incorrectly, which can lead to Request Smuggling vulnerabilities under certain conditions. If a pure Python version of aiohttp is installed (i.e. without the usual C extensions) or `AIOHTTP_NO_EXTENSIONS` is enabled, then an attacker may be able to execute a Request Smuggling attack to bypass certain firewalls or proxy protections. This issue affects aiohttp package versions through 3.10.11rc0, 3.11.0b0 through 3.11.0rc2, 4.0.0a0 and 4.0.0a1.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-aiohttp-3.9.5", "similarityId": null, "fixResolutionText": "3.12.14", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-444", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2025-53643", "cveName": "CVE-2025-53643", "score": 1.7, "severity": "Low", "publishDate": "2025-07-14T21:15:27", "references": ["https://github.com/advisories/GHSA-9548-qrrj-x5pj", "https://github.com/aio-libs/aiohttp/releases/tag/v3.12.14", "https://github.com/aio-libs/aiohttp/commit/e8d774f635dc6d1cd3174d0e38891da5de0e2b6a", "https://github.com/aio-libs/aiohttp/pull/11287", "https://github.com/aio-libs/aiohttp/issues/1652"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9548-qrrj-x5pj", "type": "Advisory", "comment": ""}, {"url": "https://github.com/aio-libs/aiohttp/releases/tag/v3.12.14", "type": "Release Note", "comment": ""}, {"url": "https://github.com/aio-libs/aiohttp/commit/e8d774f635dc6d1cd3174d0e38891da5de0e2b6a", "type": "Commit", "comment": ""}, {"url": "https://github.com/aio-libs/aiohttp/pull/11287", "type": "Pull request", "comment": ""}, {"url": "https://github.com/aio-libs/aiohttp/issues/1652", "type": "Issue", "comment": ""}], "description": "AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. The Python parser is vulnerable to a request smuggling vulnerability due to not parsing trailer sections of an HTTP request. If a pure Python version of aiohttp is installed (i.e., without the usual C extensions) or `AIOHTTP_NO_EXTENSIONS` is enabled, then an attacker may be able to execute a request smuggling attack to bypass certain firewalls or proxy protections. This issue affects versions through 3.12.13 and 4.0.0a0 through 4.0.0a1.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-aiohttp-3.9.5", "similarityId": null, "fixResolutionText": "3.12.14", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-444", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2024-6827", "cveName": "CVE-2024-6827", "score": 7.5, "severity": "High", "publishDate": "2025-03-20T10:15:33", "references": ["https://github.com/advisories/GHSA-hc5x-x2vx-497g", "https://huntr.com/bounties/1b4f8f38-39da-44b6-9f98-f618639d0dd7", "https://github.com/benoitc/gunicorn/issues/3278", "https://github.com/benoitc/gunicorn/releases/tag/23.0.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-hc5x-x2vx-497g", "type": "Advisory", "comment": ""}, {"url": "https://huntr.com/bounties/1b4f8f38-39da-44b6-9f98-f618639d0dd7", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/benoitc/gunicorn/issues/3278", "type": "Issue", "comment": ""}, {"url": "https://github.com/benoitc/gunicorn/releases/tag/23.0.0", "type": "Release Note", "comment": ""}], "description": "The Gunicorn versions through 22.0.0 do not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, Server-Side Request Forgery (SSRF), Cross-site Scripting (XSS), Denial-of-service(DoS), data integrity compromise, security bypass, information leakage, and business logic abuse.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-gunicorn-22.0.0", "similarityId": null, "fixResolutionText": "23.0.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-444", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2019-9423", "cveName": "CVE-2019-9423", "score": 7.8, "severity": "High", "publishDate": "2019-09-27T19:15:28", "references": ["https://github.com/advisories/GHSA-8849-5h85-98qw", "https://www.openwall.com/lists/oss-security/2019/11/07/1", "https://github.com/opencv/opencv/issues/20239", "https://source.android.com/security/bulletin/android-10"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8849-5h85-98qw", "type": "Advisory", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2019/11/07/1", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/opencv/opencv/issues/20239", "type": "Issue", "comment": ""}, {"url": "https://source.android.com/security/bulletin/android-10", "type": "Advisory", "comment": ""}], "description": "In opencv calls that use libpng, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616", "cvss": {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 4.6, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-contrib-python-4.11.0.86", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2019-9423", "cveName": "CVE-2019-9423", "score": 7.8, "severity": "High", "publishDate": "2019-09-27T19:15:28", "references": ["https://github.com/advisories/GHSA-8849-5h85-98qw", "https://www.openwall.com/lists/oss-security/2019/11/07/1", "https://github.com/opencv/opencv/issues/20239", "https://source.android.com/security/bulletin/android-10"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8849-5h85-98qw", "type": "Advisory", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2019/11/07/1", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/opencv/opencv/issues/20239", "type": "Issue", "comment": ""}, {"url": "https://source.android.com/security/bulletin/android-10", "type": "Advisory", "comment": ""}], "description": "In opencv calls that use libpng, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616", "cvss": {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 4.6, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.12.0.88", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2019-9423", "cveName": "CVE-2019-9423", "score": 7.8, "severity": "High", "publishDate": "2019-09-27T19:15:28", "references": ["https://github.com/advisories/GHSA-8849-5h85-98qw", "https://www.openwall.com/lists/oss-security/2019/11/07/1", "https://github.com/opencv/opencv/issues/20239", "https://source.android.com/security/bulletin/android-10"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8849-5h85-98qw", "type": "Advisory", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2019/11/07/1", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/opencv/opencv/issues/20239", "type": "Issue", "comment": ""}, {"url": "https://source.android.com/security/bulletin/android-10", "type": "Advisory", "comment": ""}], "description": "In opencv calls that use libpng, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616", "cvss": {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 4.6, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-headless-4.12.0.88", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2024-53981", "cveName": "CVE-2024-53981", "score": 8.7, "severity": "High", "publishDate": "2024-12-02T05:36:00", "references": ["https://github.com/advisories/GHSA-59g5-xgcq-4qw3", "https://github.com/Kludex/python-multipart/commit/c4fe4d3cebc08c660e57dd709af1ffa7059b3177", "https://github.com/Kludex/python-multipart/pull/193", "https://github.com/Kludex/python-multipart/releases/tag/0.0.19", "https://github.com/Kludex/python-multipart/issues/192", "https://github.com/Kludex/python-multipart/releases/tag/0.0.18", "https://github.com/Kludex/python-multipart/pull/189", "https://github.com/Kludex/python-multipart/commit/9205a0ec8c646b9f705430a6bfb52bd957b76c19"], "referencesData": [{"url": "https://github.com/advisories/GHSA-59g5-xgcq-4qw3", "type": "Advisory", "comment": ""}, {"url": "https://github.com/Kludex/python-multipart/commit/c4fe4d3cebc08c660e57dd709af1ffa7059b3177", "type": "Commit", "comment": "Additional fix"}, {"url": "https://github.com/Kludex/python-multipart/pull/193", "type": "Pull request", "comment": "Additional Pull request"}, {"url": "https://github.com/Kludex/python-multipart/releases/tag/0.0.19", "type": "Release Note", "comment": "0.0.19"}, {"url": "https://github.com/Kludex/python-multipart/issues/192", "type": "Issue", "comment": ""}, {"url": "https://github.com/Kludex/python-multipart/releases/tag/0.0.18", "type": "Release Note", "comment": "0.0.18"}, {"url": "https://github.com/Kludex/python-multipart/pull/189", "type": "Pull request", "comment": "Initial Pull request"}, {"url": "https://github.com/Kludex/python-multipart/commit/9205a0ec8c646b9f705430a6bfb52bd957b76c19", "type": "Commit", "comment": "Initial fix"}], "description": "The python-multipart is a streaming multipart parser for Python. When parsing form data, python-multipart skips line breaks (CR \"\\r\" or LF \"\\n\") in front of the first boundary and any tailing bytes after the last boundary. This happens one byte at a time and emits a log event each time, which may cause excessive logging for certain inputs. An attacker could abuse this by sending a malicious request with lots of data before the first or after the last boundary, causing a high CPU load and stalling the processing thread for a significant amount of time. In the case of the ASGI application, this could stall the event loop and prevent other requests from being processed, resulting in a Denial of Service (DoS). This issue affects python-multipart versions prior to 0.0.18.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-python-multipart-0.0.17", "similarityId": null, "fixResolutionText": "0.0.18", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2024-47081", "cveName": "CVE-2024-47081", "score": 5.3, "severity": "Medium", "publishDate": "2025-06-09T18:15:24", "references": ["https://github.com/advisories/GHSA-9hjg-9r4m-mvj7", "https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef", "https://github.com/psf/requests/releases/tag/v2.32.4", "https://github.com/psf/requests/pull/6965", "https://www.openwall.com/lists/oss-security/2025/06/04/1", "https://www.openwall.com/lists/oss-security/2025/06/04/6", "https://github.com/psf/requests/issues/6964", "https://www.openwall.com/lists/oss-security/2025/06/03/11", "https://github.com/psf/requests/commit/5b4b64c3467fd7a3c03f91ee641aaa348b6bed3b"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9hjg-9r4m-mvj7", "type": "Advisory", "comment": ""}, {"url": "https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef", "type": "Commit", "comment": "Initial fix"}, {"url": "https://github.com/psf/requests/releases/tag/v2.32.4", "type": "Release Note", "comment": ""}, {"url": "https://github.com/psf/requests/pull/6965", "type": "Pull request", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2025/06/04/1", "type": "Mail Thread", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2025/06/04/6", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/psf/requests/issues/6964", "type": "Issue", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2025/06/03/11", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/psf/requests/commit/5b4b64c3467fd7a3c03f91ee641aaa348b6bed3b", "type": "Commit", "comment": "Additional fix"}], "description": "Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak \".netrc\" credentials to third parties for specific maliciously crafted URLs. For older versions of Requests, use of the \".netrc\" file can be disabled with \"trust_env=False\" on one's Requests Session.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-requests-2.32.3", "similarityId": null, "fixResolutionText": "2.32.4", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-522", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2024-47874", "cveName": "CVE-2024-47874", "score": 0.0, "severity": "None", "publishDate": "2024-10-15T16:15:05", "references": ["https://github.com/advisories/GHSA-f96h-pmfr-66vw", "https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733", "https://github.com/encode/starlette/releases/tag/0.40.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-f96h-pmfr-66vw", "type": "Advisory", "comment": ""}, {"url": "https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733", "type": "Commit", "comment": ""}, {"url": "https://github.com/encode/starlette/releases/tag/0.40.0", "type": "Release Note", "comment": ""}], "description": "Starlette is an Asynchronous Server Gateway Interface (ASGI) framework/toolkit. In starlette package version 0.4.1 through 0.39.2, Starlette treats `multipart/form-data` parts without a `filename` as text form fields and buffers those in byte strings with no size limit. This allows an attacker to upload arbitrary large form fields and causes Starlette to both slow down significantly due to excessive memory allocations and copy operations, and also consume more and more memory until the server starts swapping and grinds to a halt, or the OS terminates the server process with an OOM error. Uploading multiple such requests in parallel may be enough to render a service practically unusable, even if reasonable request size limits are enforced by a reverse proxy in front of Starlette. This Denial of Service (DoS) vulnerability affects all applications built with Starlette (or FastAPI) accepting form requests.", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Python-starlette-0.38.6", "similarityId": null, "fixResolutionText": "0.47.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2025-54121", "cveName": "CVE-2025-54121", "score": 5.3, "severity": "Medium", "publishDate": "2025-07-21T20:15:41", "references": ["https://github.com/advisories/GHSA-2c2j-9gv5-cj73", "https://github.com/encode/starlette/releases/tag/0.47.2", "https://github.com/encode/starlette/pull/2962", "https://github.com/encode/starlette/commit/9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1"], "referencesData": [{"url": "https://github.com/advisories/GHSA-2c2j-9gv5-cj73", "type": "Advisory", "comment": ""}, {"url": "https://github.com/encode/starlette/releases/tag/0.47.2", "type": "Release Note", "comment": ""}, {"url": "https://github.com/encode/starlette/pull/2962", "type": "Pull request", "comment": ""}, {"url": "https://github.com/encode/starlette/commit/9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1", "type": "Commit", "comment": ""}], "description": "Starlette is a lightweight ASGI (Asynchronous Server Gateway Interface) framework/toolkit, designed for building async web services in Python. In versions prior 0.47.2 , when parsing a multi-part form with large files (greater than the default max spool size) starlette will block the main thread to roll the file over to disk. This blocks the event thread which means the application can't accept new connections. The \"UploadFile\" code has a minor bug where instead of just checking for \"self._in_memory,\" the logic should also check if the additional bytes will cause a rollover.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-starlette-0.38.6", "similarityId": null, "fixResolutionText": "0.47.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2025-2148", "cveName": "CVE-2025-2148", "score": 2.3, "severity": "Low", "publishDate": "2025-03-10T12:15:12", "references": ["https://github.com/advisories/GHSA-c678-jfcj-6jmf", "https://github.com/pytorch/pytorch/issues/147722", "https://github.com/pytorch/pytorch/blob/bc11afd41fc68637000dcd9c14128c75d9361443/torch/csrc/autograd/record_function_ops.cpp#L141"], "referencesData": [{"url": "https://github.com/advisories/GHSA-c678-jfcj-6jmf", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/147722", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/bc11afd41fc68637000dcd9c14128c75d9361443/torch/csrc/autograd/record_function_ops.cpp#L141", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability was found in PyTorch versions 1.6.0 and after. Affected by this vulnerability is the function \"torch.ops.profiler._call_end_callbacks_on_jit_fut\" of the component Tuple Handler. The manipulation of the argument None leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 5.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "4.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-torch-2.7.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-119", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2025-2953", "cveName": "CVE-2025-2953", "score": 4.8, "severity": "Medium", "publishDate": "2025-03-30T16:15:14", "references": ["https://github.com/advisories/GHSA-3749-ghw9-m3mg", "https://github.com/pytorch/pytorch/issues/149274", "https://github.com/pytorch/pytorch/commit/6f327128a99debfb2312ee256523ad6b62f763d6", "https://github.com/pytorch/pytorch/pull/151848"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3749-ghw9-m3mg", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149274", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/commit/6f327128a99debfb2312ee256523ad6b62f763d6", "type": "Commit", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/pull/151848", "type": "Pull request", "comment": ""}], "description": "A vulnerability, which was classified as problematic, has been found in PyTorch. Affected by this issue is the function \"torch.mkldnn_max_pool2d\". The manipulation leads to Denial of Service (DoS). An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The issue affects pytorch versions prior to v2.7.1-rc1.", "cvss": {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 1.7, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-torch-2.7.0", "similarityId": null, "fixResolutionText": "2.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-404", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2025-2998", "cveName": "CVE-2025-2998", "score": 4.8, "severity": "Medium", "publishDate": "2025-03-31T14:15:20", "references": ["https://github.com/advisories/GHSA-f4hp-rmr7-r7v8", "https://github.com/pytorch/pytorch/issues/149622", "https://github.com/pytorch/pytorch/blob/9d6f0d5991de8e2bf96c9979aeb7258262259c00/torch/nn/utils/rnn.py#L339"], "referencesData": [{"url": "https://github.com/advisories/GHSA-f4hp-rmr7-r7v8", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149622", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/9d6f0d5991de8e2bf96c9979aeb7258262259c00/torch/nn/utils/rnn.py#L339", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability was found in PyTorch. It has been declared as critical. Affected by this vulnerability is the function `torch.nn.utils.rnn.pad_packed_sequence`. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.", "cvss": {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-torch-2.7.0", "similarityId": null, "fixResolutionText": "2.8.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-119", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2025-2999", "cveName": "CVE-2025-2999", "score": 4.8, "severity": "Medium", "publishDate": "2025-03-31T15:15:44", "references": ["https://github.com/advisories/GHSA-vgrw-7cvw-pwgx", "https://github.com/pytorch/pytorch/issues/149622", "https://github.com/pytorch/pytorch/blob/v2.6.0/torch/nn/utils/rnn.py#L574C1-L602C30"], "referencesData": [{"url": "https://github.com/advisories/GHSA-vgrw-7cvw-pwgx", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149622", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/v2.6.0/torch/nn/utils/rnn.py#L574C1-L602C30", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability was found in PyTorch 1.11.0 and after. Affected by this issue is the function \"torch.nn.utils.rnn.unpack_sequence\". The manipulation leads to Memory Corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.", "cvss": {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-torch-2.7.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-119", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2025-3000", "cveName": "CVE-2025-3000", "score": 4.8, "severity": "Medium", "publishDate": "2025-03-31T15:15:46", "references": ["https://github.com/advisories/GHSA-rrmf-rvhw-rf47", "https://github.com/pytorch/pytorch/issues/149623"], "referencesData": [{"url": "https://github.com/advisories/GHSA-rrmf-rvhw-rf47", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149623", "type": "Issue", "comment": ""}], "description": "A vulnerability classified as critical has been found in PyTorch. This affects the function \"torch.jit.script\". The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.", "cvss": {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-torch-2.7.0", "similarityId": null, "fixResolutionText": "2.8.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-119", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2025-3001", "cveName": "CVE-2025-3001", "score": 4.8, "severity": "Medium", "publishDate": "2025-03-31T16:15:27", "references": ["https://github.com/advisories/GHSA-qfhq-4f3w-5fph", "https://github.com/pytorch/pytorch/issues/149626", "https://github.com/pytorch/pytorch/blob/aec3ef100844631cb7c4ce2725157984eb9cebfe/aten/src/ATen/native/RNN.cpp#L1524"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qfhq-4f3w-5fph", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149626", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/aec3ef100844631cb7c4ce2725157984eb9cebfe/aten/src/ATen/native/RNN.cpp#L1524", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability classified as critical was found in PyTorch. This vulnerability affects the function \"torch.lstm_cell\". The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.", "cvss": {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-torch-2.7.0", "similarityId": null, "fixResolutionText": "2.8.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-119", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2025-3121", "cveName": "CVE-2025-3121", "score": 4.8, "severity": "Medium", "publishDate": "2025-04-02T22:15:21", "references": ["https://github.com/advisories/GHSA-qcc7-ch57-rh8j", "https://github.com/pytorch/pytorch/issues/149800", "https://github.com/pytorch/pytorch/blob/main/torch/jit/_serialization.py#L197C1-L202C79"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qcc7-ch57-rh8j", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149800", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/main/torch/jit/_serialization.py#L197C1-L202C79", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability classified as problematic has been found in PyTorch 1.12.0 and after. The function \"torch.jit.jit_module_from_flatbuffer\" is affected by this issue. The manipulation leads to Memory Corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.", "cvss": {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 1.7, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-torch-2.7.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-119", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2025-3136", "cveName": "CVE-2025-3136", "score": 4.8, "severity": "Medium", "publishDate": "2025-04-03T04:15:38", "references": ["https://github.com/advisories/GHSA-r37f-v2p6-x6cx", "https://github.com/pytorch/pytorch/issues/149821", "https://github.com/pytorch/pytorch/blob/b99e0c5412183c0516420dac123d096f4431909b/c10/cuda/CUDACachingAllocator.cpp#L3406"], "referencesData": [{"url": "https://github.com/advisories/GHSA-r37f-v2p6-x6cx", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149821", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/b99e0c5412183c0516420dac123d096f4431909b/c10/cuda/CUDACachingAllocator.cpp#L3406", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability, which was classified as problematic, has been found in PyTorch. This issue affects the function \"torch.cuda.memory.caching_allocator_delete\" of the file \"c10/cuda/CUDACachingAllocator.cpp\". The manipulation leads to Memory Corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.", "cvss": {"score": 3.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 1.7, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 3.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Python-torch-2.7.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2025-3730", "cveName": "CVE-2025-3730", "score": 4.8, "severity": "Medium", "publishDate": "2025-04-16T21:15:48", "references": ["https://github.com/advisories/GHSA-887c-mr87-cxwp", "https://github.com/pytorch/pytorch/commit/01f226bfb8f2c343f5c614a6bbf685d91160f3af", "https://github.com/pytorch/pytorch/pull/150981", "https://github.com/pytorch/pytorch/issues/150835"], "referencesData": [{"url": "https://github.com/advisories/GHSA-887c-mr87-cxwp", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/commit/01f226bfb8f2c343f5c614a6bbf685d91160f3af", "type": "Commit", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/pull/150981", "type": "Pull request", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/150835", "type": "Issue", "comment": ""}], "description": "A vulnerability, classified as problematic, was found in PyTorch. The affected function is \"torch.nn.functional.ctc_loss\" in the file \"aten/src/ATen/native/LossCTC.cpp\". The manipulation leads to a denial of service. The attack must be conducted locally. The exploit has been publicly disclosed and may be used. It is recommended that a patch be applied to fix this issue. This issue affects version prior to 2.8.0-rc1.\n", "cvss": {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 1.7, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-torch-2.7.0", "similarityId": null, "fixResolutionText": "2.8.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-404", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2025-4287", "cveName": "CVE-2025-4287", "score": 4.8, "severity": "Medium", "publishDate": "2025-05-05T20:15:22", "references": ["https://github.com/advisories/GHSA-vw34-v45x-2c97", "https://github.com/pytorch/pytorch/issues/150836", "https://github.com/pytorch/pytorch/pull/150923", "https://github.com/pytorch/pytorch/blob/ff4515fde58d73dc0f7152dcbae7a89e48bb8899/torch/cuda/nccl.py#L82C1-L122C69"], "referencesData": [{"url": "https://github.com/advisories/GHSA-vw34-v45x-2c97", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/150836", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/pull/150923", "type": "Pull request", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/ff4515fde58d73dc0f7152dcbae7a89e48bb8899/torch/cuda/nccl.py#L82C1-L122C69", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability was found in pytorch versions 0.1.5 and after. It has been rated as problematic. Affected by this issue is the function `reduce` of the file `torch/cuda/nccl.py`. The manipulation leads to Denial of Service (DoS). It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The patch is identified as 5827d2061dcb4acd05ac5f8e65d8693a481ba0f5 in this \"Divigroup-RAP/PYTORCH\" forked repository", "cvss": {"score": 3.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 1.7, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 3.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Python-torch-2.7.0", "similarityId": null, "fixResolutionText": "2.8.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-404", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2025-2148", "cveName": "CVE-2025-2148", "score": 2.3, "severity": "Low", "publishDate": "2025-03-10T12:15:12", "references": ["https://github.com/advisories/GHSA-c678-jfcj-6jmf", "https://github.com/pytorch/pytorch/issues/147722", "https://github.com/pytorch/pytorch/blob/bc11afd41fc68637000dcd9c14128c75d9361443/torch/csrc/autograd/record_function_ops.cpp#L141"], "referencesData": [{"url": "https://github.com/advisories/GHSA-c678-jfcj-6jmf", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/147722", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/bc11afd41fc68637000dcd9c14128c75d9361443/torch/csrc/autograd/record_function_ops.cpp#L141", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability was found in PyTorch versions 1.6.0 and after. Affected by this vulnerability is the function \"torch.ops.profiler._call_end_callbacks_on_jit_fut\" of the component Tuple Handler. The manipulation of the argument None leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 5.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "4.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-torch-2.8.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-119", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2025-2999", "cveName": "CVE-2025-2999", "score": 4.8, "severity": "Medium", "publishDate": "2025-03-31T15:15:44", "references": ["https://github.com/advisories/GHSA-vgrw-7cvw-pwgx", "https://github.com/pytorch/pytorch/issues/149622", "https://github.com/pytorch/pytorch/blob/v2.6.0/torch/nn/utils/rnn.py#L574C1-L602C30"], "referencesData": [{"url": "https://github.com/advisories/GHSA-vgrw-7cvw-pwgx", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149622", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/v2.6.0/torch/nn/utils/rnn.py#L574C1-L602C30", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability was found in PyTorch 1.11.0 and after. Affected by this issue is the function \"torch.nn.utils.rnn.unpack_sequence\". The manipulation leads to Memory Corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.", "cvss": {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-torch-2.8.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-119", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2025-3121", "cveName": "CVE-2025-3121", "score": 4.8, "severity": "Medium", "publishDate": "2025-04-02T22:15:21", "references": ["https://github.com/advisories/GHSA-qcc7-ch57-rh8j", "https://github.com/pytorch/pytorch/issues/149800", "https://github.com/pytorch/pytorch/blob/main/torch/jit/_serialization.py#L197C1-L202C79"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qcc7-ch57-rh8j", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149800", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/main/torch/jit/_serialization.py#L197C1-L202C79", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability classified as problematic has been found in PyTorch 1.12.0 and after. The function \"torch.jit.jit_module_from_flatbuffer\" is affected by this issue. The manipulation leads to Memory Corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.", "cvss": {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 1.7, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-torch-2.8.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-119", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2025-3136", "cveName": "CVE-2025-3136", "score": 4.8, "severity": "Medium", "publishDate": "2025-04-03T04:15:38", "references": ["https://github.com/advisories/GHSA-r37f-v2p6-x6cx", "https://github.com/pytorch/pytorch/issues/149821", "https://github.com/pytorch/pytorch/blob/b99e0c5412183c0516420dac123d096f4431909b/c10/cuda/CUDACachingAllocator.cpp#L3406"], "referencesData": [{"url": "https://github.com/advisories/GHSA-r37f-v2p6-x6cx", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149821", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/b99e0c5412183c0516420dac123d096f4431909b/c10/cuda/CUDACachingAllocator.cpp#L3406", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability, which was classified as problematic, has been found in PyTorch. This issue affects the function \"torch.cuda.memory.caching_allocator_delete\" of the file \"c10/cuda/CUDACachingAllocator.cpp\". The manipulation leads to Memory Corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.", "cvss": {"score": 3.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 1.7, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 3.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Python-torch-2.8.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2025-5197", "cveName": "CVE-2025-5197", "score": 5.3, "severity": "Medium", "publishDate": "2025-08-06T12:15:26", "references": ["https://github.com/advisories/GHSA-9356-575x-2w9m", "https://huntr.com/bounties/3f8b3fd0-166b-46e7-b60f-60dd9d2678bf", "https://github.com/huggingface/transformers/commit/701caef704e356dc2f9331cc3fd5df0eccb4720a", "https://github.com/huggingface/transformers/releases/tag/v4.53.0", "https://github.com/huggingface/transformers/pull/38325"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9356-575x-2w9m", "type": "Advisory", "comment": ""}, {"url": "https://huntr.com/bounties/3f8b3fd0-166b-46e7-b60f-60dd9d2678bf", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/701caef704e356dc2f9331cc3fd5df0eccb4720a", "type": "Commit", "comment": ""}, {"url": "https://github.com/huggingface/transformers/releases/tag/v4.53.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/38325", "type": "Pull request", "comment": ""}], "description": "A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library, specifically in the `convert_tf_weight_name_to_pt_weight_name()` function. This function, responsible for converting TensorFlow weight names to PyTorch format, uses a regex pattern `/[^/]*___([^/]*)/` that can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. This issue can lead to service disruption, resource exhaustion, and potential API service vulnerabilities, impacting model conversion processes between TensorFlow and PyTorch formats. This issue affects the package transformers versions 2.0.0 through 4.52.4.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-transformers-4.52.4", "similarityId": null, "fixResolutionText": "4.53.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aitv-wan-motion-synth-service", "_project_name": "inmobi-glance/aitv-wan-motion-synth-service"}, {"id": "CVE-2024-12798", "cveName": "CVE-2024-12798", "score": 5.9, "severity": "Medium", "publishDate": "2024-12-19T16:15:00", "references": ["https://github.com/advisories/GHSA-pr98-23f8-jwxv", "https://github.com/qos-ch/logback/commit/2cb6d520df7592ef1c3a198f1b5df3c10c93e183", "https://logback.qos.ch/news.html#1.5.13"], "referencesData": [{"url": "https://github.com/advisories/GHSA-pr98-23f8-jwxv", "type": "Advisory", "comment": ""}, {"url": "https://github.com/qos-ch/logback/commit/2cb6d520df7592ef1c3a198f1b5df3c10c93e183", "type": "Commit", "comment": ""}, {"url": "https://logback.qos.ch/news.html#1.5.13", "type": "Release Note", "comment": ""}], "description": "Arbitrary Code Execution vulnerability in \"JaninoEventEvaluator\" by QOS.CH logback in Java applications, allows attackers to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program execution. Malicious logback configuration files can allow the attacker to execute arbitrary code using the \"JaninoEventEvaluator\" extension. A successful attack requires the user to have write access to a configuration file. Alternatively, the attacker could inject a malicious environment variable pointing to a malicious configuration file. In both cases, the attack requires existing privilege. This issue affects ch.qos.logback:logback-classic and ch.qos.logback:logback-core packages versions through 1.3.14, and 1.4.0 through 1.5.12.", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Maven-ch.qos.logback:logback-classic-1.2.3", "similarityId": null, "fixResolutionText": "1.3.15", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-917", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-42550", "cveName": "CVE-2021-42550", "score": 6.6, "severity": "Medium", "publishDate": "2021-12-16T19:15:00", "references": ["https://github.com/advisories/GHSA-668q-qrv7-99fm", "https://jira.qos.ch/browse/LOGBACK-1591", "https://logback.qos.ch/news.html", "https://github.com/qos-ch/logback/commit/87291079a1de9369ac67e20dc70a8fdc7cc4359c", "https://github.com/qos-ch/logback/commit/c43bd30e1092b89bb91f5fb6a28310956b3bac61", "https://github.com/cn-panda/logbackRceDemo"], "referencesData": [{"url": "https://github.com/advisories/GHSA-668q-qrv7-99fm", "type": "Advisory", "comment": ""}, {"url": "https://jira.qos.ch/browse/LOGBACK-1591", "type": "Issue", "comment": ""}, {"url": "https://logback.qos.ch/news.html", "type": "Release Note", "comment": ""}, {"url": "https://github.com/qos-ch/logback/commit/87291079a1de9369ac67e20dc70a8fdc7cc4359c", "type": "Commit", "comment": "Initial fix"}, {"url": "https://github.com/qos-ch/logback/commit/c43bd30e1092b89bb91f5fb6a28310956b3bac61", "type": "Commit", "comment": "Last fix"}, {"url": "https://github.com/cn-panda/logbackRceDemo", "type": "POC/Exploit", "comment": ""}], "description": "In logback versions prior to 1.2.9 and 1.3.x prior to 1.3.0-alpha11, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.", "cvss": {"score": 6.6, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.6, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-ch.qos.logback:logback-classic-1.2.3", "similarityId": null, "fixResolutionText": "1.3.15", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2023-6378", "cveName": "CVE-2023-6378", "score": 7.5, "severity": "High", "publishDate": "2023-11-29T12:15:00", "references": ["https://github.com/advisories/GHSA-vmq6-5m68-f53m", "https://logback.qos.ch/news.html#1.3.12", "https://github.com/qos-ch/logback/commit/9c782b45be4abdafb7e17481e24e7354c2acd1eb"], "referencesData": [{"url": "https://github.com/advisories/GHSA-vmq6-5m68-f53m", "type": "Advisory", "comment": ""}, {"url": "https://logback.qos.ch/news.html#1.3.12", "type": "Release Note", "comment": ""}, {"url": "https://github.com/qos-ch/logback/commit/9c782b45be4abdafb7e17481e24e7354c2acd1eb", "type": "Commit", "comment": ""}], "description": "A serialization vulnerability in logback receiver component part of logback versions prior to 1.2.13, 1.3.x prior to 1.3.12, and 1.4.x prior to 1.4.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-ch.qos.logback:logback-classic-1.2.3", "similarityId": null, "fixResolutionText": "1.3.15", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2024-12801", "cveName": "CVE-2024-12801", "score": 2.4, "severity": "Low", "publishDate": "2024-12-19T17:15:08", "references": ["https://github.com/advisories/GHSA-6v67-2wr5-gvf4", "https://github.com/qos-ch/logback/commit/5f05041cba4c4ac0a62748c5c527a2da48999f2d", "https://logback.qos.ch/news.html#1.5.13"], "referencesData": [{"url": "https://github.com/advisories/GHSA-6v67-2wr5-gvf4", "type": "Advisory", "comment": ""}, {"url": "https://github.com/qos-ch/logback/commit/5f05041cba4c4ac0a62748c5c527a2da48999f2d", "type": "Commit", "comment": ""}, {"url": "https://logback.qos.ch/news.html#1.5.13", "type": "Release Note", "comment": ""}], "description": "Server-Side Request Forgery (SSRF) in \"SaxEventRecorder\" by QOS.CH logback on the Java platform, allows an attacker to forge requests by compromising logback configuration files in XML. The attack involves the modification of \"DOCTYPE\" declaration in XML configuration files. This issue affects \n ch.qos.logback:logback-core package versions through 1.3.14, and 1.4.0 through 1.5.12.", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Maven-ch.qos.logback:logback-core-1.2.3", "similarityId": null, "fixResolutionText": "1.3.15", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-918", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2023-6481", "cveName": "CVE-2023-6481", "score": 7.5, "severity": "High", "publishDate": "2023-12-04T09:15:00", "references": ["https://github.com/advisories/GHSA-gm62-rw4g-vrc4", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2023-6481", "https://github.com/qos-ch/logback/commit/7018a3609c7bcc9dc7bf5903509901a986e5f578", "https://logback.qos.ch/news.html#1.3.14"], "referencesData": [{"url": "https://github.com/advisories/GHSA-gm62-rw4g-vrc4", "type": "Advisory", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2023-6481", "type": "Issue", "comment": ""}, {"url": "https://github.com/qos-ch/logback/commit/7018a3609c7bcc9dc7bf5903509901a986e5f578", "type": "Commit", "comment": ""}, {"url": "https://logback.qos.ch/news.html#1.3.14", "type": "Release Note", "comment": ""}], "description": "A serialization vulnerability in logback receiver component part of logback versions through 1.2.12, 1.3.x through 1.3.13, and 1.4.x through 1.4.13 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. This is due to the incomplete fix of CVE-2023-6378.\n\n", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-ch.qos.logback:logback-core-1.2.3", "similarityId": null, "fixResolutionText": "1.3.15", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2023-6378", "cveName": "CVE-2023-6378", "score": 7.5, "severity": "High", "publishDate": "2023-11-29T12:15:00", "references": ["https://github.com/advisories/GHSA-vmq6-5m68-f53m", "https://logback.qos.ch/news.html#1.3.12", "https://github.com/qos-ch/logback/commit/9c782b45be4abdafb7e17481e24e7354c2acd1eb"], "referencesData": [{"url": "https://github.com/advisories/GHSA-vmq6-5m68-f53m", "type": "Advisory", "comment": ""}, {"url": "https://logback.qos.ch/news.html#1.3.12", "type": "Release Note", "comment": ""}, {"url": "https://github.com/qos-ch/logback/commit/9c782b45be4abdafb7e17481e24e7354c2acd1eb", "type": "Commit", "comment": ""}], "description": "A serialization vulnerability in logback receiver component part of logback versions prior to 1.2.13, 1.3.x prior to 1.3.12, and 1.4.x prior to 1.4.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-ch.qos.logback:logback-core-1.2.3", "similarityId": null, "fixResolutionText": "1.3.15", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2024-12798", "cveName": "CVE-2024-12798", "score": 5.9, "severity": "Medium", "publishDate": "2024-12-19T16:15:00", "references": ["https://github.com/advisories/GHSA-pr98-23f8-jwxv", "https://github.com/qos-ch/logback/commit/2cb6d520df7592ef1c3a198f1b5df3c10c93e183", "https://logback.qos.ch/news.html#1.5.13"], "referencesData": [{"url": "https://github.com/advisories/GHSA-pr98-23f8-jwxv", "type": "Advisory", "comment": ""}, {"url": "https://github.com/qos-ch/logback/commit/2cb6d520df7592ef1c3a198f1b5df3c10c93e183", "type": "Commit", "comment": ""}, {"url": "https://logback.qos.ch/news.html#1.5.13", "type": "Release Note", "comment": ""}], "description": "Arbitrary Code Execution vulnerability in \"JaninoEventEvaluator\" by QOS.CH logback in Java applications, allows attackers to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program execution. Malicious logback configuration files can allow the attacker to execute arbitrary code using the \"JaninoEventEvaluator\" extension. A successful attack requires the user to have write access to a configuration file. Alternatively, the attacker could inject a malicious environment variable pointing to a malicious configuration file. In both cases, the attack requires existing privilege. This issue affects ch.qos.logback:logback-classic and ch.qos.logback:logback-core packages versions through 1.3.14, and 1.4.0 through 1.5.12.", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Maven-ch.qos.logback:logback-core-1.2.3", "similarityId": null, "fixResolutionText": "1.3.15", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-917", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-42550", "cveName": "CVE-2021-42550", "score": 6.6, "severity": "Medium", "publishDate": "2021-12-16T19:15:00", "references": ["https://github.com/advisories/GHSA-668q-qrv7-99fm", "https://jira.qos.ch/browse/LOGBACK-1591", "https://logback.qos.ch/news.html", "https://github.com/qos-ch/logback/commit/87291079a1de9369ac67e20dc70a8fdc7cc4359c", "https://github.com/qos-ch/logback/commit/c43bd30e1092b89bb91f5fb6a28310956b3bac61", "https://github.com/cn-panda/logbackRceDemo"], "referencesData": [{"url": "https://github.com/advisories/GHSA-668q-qrv7-99fm", "type": "Advisory", "comment": ""}, {"url": "https://jira.qos.ch/browse/LOGBACK-1591", "type": "Issue", "comment": ""}, {"url": "https://logback.qos.ch/news.html", "type": "Release Note", "comment": ""}, {"url": "https://github.com/qos-ch/logback/commit/87291079a1de9369ac67e20dc70a8fdc7cc4359c", "type": "Commit", "comment": "Initial fix"}, {"url": "https://github.com/qos-ch/logback/commit/c43bd30e1092b89bb91f5fb6a28310956b3bac61", "type": "Commit", "comment": "Last fix"}, {"url": "https://github.com/cn-panda/logbackRceDemo", "type": "POC/Exploit", "comment": ""}], "description": "In logback versions prior to 1.2.9 and 1.3.x prior to 1.3.0-alpha11, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.", "cvss": {"score": 6.6, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.6, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-ch.qos.logback:logback-core-1.2.3", "similarityId": null, "fixResolutionText": "1.3.15", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-31159", "cveName": "CVE-2022-31159", "score": 6.5, "severity": "Medium", "publishDate": "2022-07-15T10:38:00", "references": ["https://github.com/advisories/GHSA-c28r-hw5m-5gv3", "https://github.com/aws/aws-sdk-java/blob/5be0807af763b9fbf6b0a153c76dd305e407f035/aws-java-sdk-s3/src/main/java/com/amazonaws/services/s3/transfer/TransferManager.java#L1513"], "referencesData": [{"url": "https://github.com/advisories/GHSA-c28r-hw5m-5gv3", "type": "Advisory", "comment": ""}, {"url": "https://github.com/aws/aws-sdk-java/blob/5be0807af763b9fbf6b0a153c76dd305e407f035/aws-java-sdk-s3/src/main/java/com/amazonaws/services/s3/transfer/TransferManager.java#L1513", "type": "Vulnerable code", "comment": ""}], "description": "The AWS SDK for Java enables Java developers to work with Amazon Web Services. A partial-path traversal issue exists within the `downloadDirectory` method in the AWS S3 TransferManager component of the AWS SDK for Java v1 prior to version 1.12.261. Applications using the SDK control the `destinationDirectory` argument, but S3 object keys are determined by the application that uploaded the objects. The `downloadDirectory` method allows the caller to pass a filesystem object in the object key but contained an issue in the validation logic for the key name. A knowledgeable actor could bypass the validation logic by including a UNIX double-dot in the bucket key. Under certain conditions, this could permit them to retrieve a directory from their S3 bucket that is one level up in the filesystem from their working directory. This issue's scope is limited to directories whose name prefix matches the destinationDirectory. E.g. for destination directory`/tmp/foo`, the actor can cause a download to `/tmp/foo-bar`, but not `/tmp/bar`. If `com.amazonaws.services.s3.transfer.TransferManager::downloadDirectory` is used to download an untrusted buckets contents, the contents of that bucket can be written outside of the intended destination directory. Version 1.12.261 contains a patch for this issue. As a workaround, when calling `com.amazonaws.services.s3.transfer.TransferManager::downloadDirectory`, pass a `KeyFilter` that forbids `S3ObjectSummary` objects that `getKey` method return a string containing the substring `..` .", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-com.amazonaws:aws-java-sdk-s3-1.11.600", "similarityId": null, "fixResolutionText": "1.12.13", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-22", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-16335", "cveName": "CVE-2019-16335", "score": 9.8, "severity": "Critical", "publishDate": "2019-09-15T22:15:00", "references": ["https://github.com/FasterXML/jackson-databind/issues/2449", "https://github.com/FasterXML/jackson-databind/commit/73c1c2cc76e6cdd7f3a5615cbe3207fe96e4d3db"], "referencesData": [{"url": "https://github.com/FasterXML/jackson-databind/issues/2449", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/73c1c2cc76e6cdd7f3a5615cbe3207fe96e4d3db", "type": "Commit", "comment": ""}], "description": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-16942", "cveName": "CVE-2019-16942", "score": 9.8, "severity": "Critical", "publishDate": "2019-10-01T17:15:00", "references": ["https://github.com/FasterXML/jackson-databind/issues/2478", "https://github.com/FasterXML/jackson-databind/commit/9593e16cf5a3d289a9c584f7123639655de9ddac", "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062"], "referencesData": [{"url": "https://github.com/FasterXML/jackson-databind/issues/2478", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/9593e16cf5a3d289a9c584f7123639655de9ddac", "type": "Commit", "comment": ""}, {"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Advisory", "comment": ""}], "description": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.7.9.7, 2.8x before 2.8.11.5 and 2.9.x before 2.9.10.1. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "High", "cvss3Severity": null}, {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-16943", "cveName": "CVE-2019-16943", "score": 9.8, "severity": "Critical", "publishDate": "2019-10-01T17:15:00", "references": ["https://github.com/FasterXML/jackson-databind/issues/2478", "https://github.com/FasterXML/jackson-databind/commit/9593e16cf5a3d289a9c584f7123639655de9ddac", "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062"], "referencesData": [{"url": "https://github.com/FasterXML/jackson-databind/issues/2478", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/9593e16cf5a3d289a9c584f7123639655de9ddac", "type": "Commit", "comment": ""}, {"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Advisory", "comment": ""}], "description": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.7.9.7, 2.8.x before 2.8.11.5 and 2.9.x up to 2.9.10.1. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of com.p6spy.engine.spy.P6DataSource mishandling.", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "High", "cvss3Severity": null}, {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-17267", "cveName": "CVE-2019-17267", "score": 9.8, "severity": "Critical", "publishDate": "2019-10-07T00:15:00", "references": ["https://github.com/advisories/GHSA-f3j5-rmmp-3fc5", "https://security.netapp.com/advisory/ntap-20191017-0006/", "https://github.com/FasterXML/jackson-databind/issues/2460", "https://lists.debian.org/debian-lts-announce/2019/12/msg00013.html", "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "https://github.com/FasterXML/jackson-databind/commit/191a4cdf87b56d2ddddb77edd895ee756b7f75eb", "https://github.com/FasterXML/jackson-databind/commit/a3939d36edcc755c8af55bdc1969e0fa8438f9db"], "referencesData": [{"url": "https://github.com/advisories/GHSA-f3j5-rmmp-3fc5", "type": "Advisory", "comment": ""}, {"url": "https://security.netapp.com/advisory/ntap-20191017-0006/", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2460", "type": "Issue", "comment": ""}, {"url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00013.html", "type": "Advisory", "comment": ""}, {"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Advisory", "comment": "Description of general problem"}, {"url": "https://github.com/FasterXML/jackson-databind/commit/191a4cdf87b56d2ddddb77edd895ee756b7f75eb", "type": "Commit", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/a3939d36edcc755c8af55bdc1969e0fa8438f9db", "type": "Commit", "comment": "Backport for 2.6.7.3"}], "description": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.6.7.3, 2.7.x, 2.8.x before 2.8.11.5, and 2.9.x before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "High", "cvss3Severity": null}, {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-17531", "cveName": "CVE-2019-17531", "score": 9.8, "severity": "Critical", "publishDate": "2019-10-12T21:15:00", "references": ["https://github.com/FasterXML/jackson-databind/issues/2498", "https://github.com/FasterXML/jackson-databind/commit/b5a304a98590b6bb766134f9261e6566dcbbb6d0", "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062"], "referencesData": [{"url": "https://github.com/FasterXML/jackson-databind/issues/2498", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/b5a304a98590b6bb766134f9261e6566dcbbb6d0", "type": "Commit", "comment": ""}, {"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Advisory", "comment": ""}], "description": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.7.9.7, 2.8.x up to 2.8.11.4 and 2.9.x up to 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload.", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "High", "cvss3Severity": null}, {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-20330", "cveName": "CVE-2019-20330", "score": 9.8, "severity": "Critical", "publishDate": "2020-01-03T04:15:00", "references": ["https://github.com/advisories/GHSA-gww7-p5w4-wrfv", "https://security.netapp.com/advisory/ntap-20200127-0004/", "https://github.com/FasterXML/jackson-databind/issues/2526", "https://github.com/FasterXML/jackson-databind/commit/fc4214a883dc087070f25da738ef0d49c2f3387e"], "referencesData": [{"url": "https://github.com/advisories/GHSA-gww7-p5w4-wrfv", "type": "Advisory", "comment": ""}, {"url": "https://security.netapp.com/advisory/ntap-20200127-0004/", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2526", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/fc4214a883dc087070f25da738ef0d49c2f3387e", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind 2.x before 2.7.9.7, 2.8.x before 2.8.11.5, 2.9.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "High", "cvss3Severity": null}, {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-10650", "cveName": "CVE-2020-10650", "score": 8.1, "severity": "High", "publishDate": "2022-12-26T20:15:10", "references": ["https://github.com/advisories/GHSA-rpr3-cw39-3pxh", "https://github.com/FasterXML/jackson-databind/issues/2658", "https://github.com/FasterXML/jackson-databind/pull/2864", "https://github.com/FasterXML/jackson-databind/commit/a424c038ba0c0d65e579e22001dec925902ac0ef"], "referencesData": [{"url": "https://github.com/advisories/GHSA-rpr3-cw39-3pxh", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2658", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/pull/2864", "type": "Pull request", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/a424c038ba0c0d65e579e22001dec925902ac0ef", "type": "Commit", "comment": ""}], "description": "The com.fasterxml.jackson.core:jackson-databind library before versions 2.9.10.4 and 2.10.4 are vulnerable to an Unsafe Deserialization vulnerability when handling interactions related to the class \"ignite-jta\"", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-10672", "cveName": "CVE-2020-10672", "score": 8.8, "severity": "High", "publishDate": "2020-03-18T22:15:00", "references": ["https://github.com/advisories/GHSA-95cm-88f5-f2c7", "https://github.com/FasterXML/jackson-databind/issues/2659", "https://github.com/FasterXML/jackson-databind/commit/592872f4235c7f2a3280725278da55544032f72d", "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062"], "referencesData": [{"url": "https://github.com/advisories/GHSA-95cm-88f5-f2c7", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2659", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/592872f4235c7f2a3280725278da55544032f72d", "type": "Commit", "comment": ""}, {"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Other", "comment": "General problem description "}], "description": "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-10673", "cveName": "CVE-2020-10673", "score": 8.8, "severity": "High", "publishDate": "2020-03-18T22:15:00", "references": ["https://github.com/advisories/GHSA-fqwf-pjwf-7vqv", "https://github.com/FasterXML/jackson-databind/issues/2660", "https://github.com/FasterXML/jackson-databind/commit/1645efbd392989cf015f459a91c999e59c921b15", "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062"], "referencesData": [{"url": "https://github.com/advisories/GHSA-fqwf-pjwf-7vqv", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2660", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/1645efbd392989cf015f459a91c999e59c921b15", "type": "Commit", "comment": ""}, {"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Other", "comment": "General problem description "}], "description": "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-10968", "cveName": "CVE-2020-10968", "score": 8.8, "severity": "High", "publishDate": "2020-03-26T13:15:00", "references": ["https://github.com/advisories/GHSA-rf6r-2c4q-2vwg", "https://github.com/FasterXML/jackson-databind/issues/2662", "https://github.com/FasterXML/jackson-databind/commit/05d7e0e13f43e12db6a51726df12c8b4d8040676", "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062"], "referencesData": [{"url": "https://github.com/advisories/GHSA-rf6r-2c4q-2vwg", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2662", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/05d7e0e13f43e12db6a51726df12c8b4d8040676", "type": "Commit", "comment": ""}, {"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Other", "comment": "General problem description "}], "description": "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-10969", "cveName": "CVE-2020-10969", "score": 8.8, "severity": "High", "publishDate": "2020-03-26T13:15:00", "references": ["https://github.com/advisories/GHSA-758m-v56v-grj4", "https://github.com/FasterXML/jackson-databind/issues/2642", "https://github.com/FasterXML/jackson-databind/commit/4d038c9de0aa80a5dae27f552a975cb39cc42b60", "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062"], "referencesData": [{"url": "https://github.com/advisories/GHSA-758m-v56v-grj4", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2642", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/4d038c9de0aa80a5dae27f552a975cb39cc42b60", "type": "Commit", "comment": ""}, {"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Other", "comment": "description of the general problem"}], "description": "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-11111", "cveName": "CVE-2020-11111", "score": 8.8, "severity": "High", "publishDate": "2020-03-31T05:15:00", "references": ["https://github.com/advisories/GHSA-v3xw-c963-f5hc", "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "https://security.netapp.com/advisory/ntap-20200403-0002/", "https://github.com/FasterXML/jackson-databind/issues/2664", "https://github.com/FasterXML/jackson-databind/commit/05d7e0e13f43e12db6a51726df12c8b4d8040676"], "referencesData": [{"url": "https://github.com/advisories/GHSA-v3xw-c963-f5hc", "type": "Advisory", "comment": ""}, {"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Advisory", "comment": "Description of general problem"}, {"url": "https://security.netapp.com/advisory/ntap-20200403-0002/", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2664", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/05d7e0e13f43e12db6a51726df12c8b4d8040676", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms).", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-11112", "cveName": "CVE-2020-11112", "score": 8.8, "severity": "High", "publishDate": "2020-03-31T05:15:00", "references": ["https://github.com/advisories/GHSA-58pp-9c76-5625", "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "https://security.netapp.com/advisory/ntap-20200403-0002/", "https://github.com/FasterXML/jackson-databind/issues/2666", "https://github.com/FasterXML/jackson-databind/commit/05d7e0e13f43e12db6a51726df12c8b4d8040676"], "referencesData": [{"url": "https://github.com/advisories/GHSA-58pp-9c76-5625", "type": "Advisory", "comment": ""}, {"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Advisory", "comment": "Description of general problem"}, {"url": "https://security.netapp.com/advisory/ntap-20200403-0002/", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2666", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/05d7e0e13f43e12db6a51726df12c8b4d8040676", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commons-proxy).", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-11113", "cveName": "CVE-2020-11113", "score": 8.8, "severity": "High", "publishDate": "2020-03-31T05:15:00", "references": ["https://github.com/advisories/GHSA-9vvp-fxw6-jcxr", "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "https://security.netapp.com/advisory/ntap-20200403-0002/", "https://github.com/FasterXML/jackson-databind/issues/2670", "https://github.com/FasterXML/jackson-databind/commit/e2ba12d5d60715d95105e3e790fc234cfb59893d"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9vvp-fxw6-jcxr", "type": "Advisory", "comment": ""}, {"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Advisory", "comment": "Description of general problem"}, {"url": "https://security.netapp.com/advisory/ntap-20200403-0002/", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2670", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/e2ba12d5d60715d95105e3e790fc234cfb59893d", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-11619", "cveName": "CVE-2020-11619", "score": 8.1, "severity": "High", "publishDate": "2020-04-07T23:15:00", "references": ["https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html", "https://github.com/FasterXML/jackson-databind/issues/2680", "https://github.com/FasterXML/jackson-databind/commit/113e89fb08b1b6b072d60b3e4737ed407c13db9a"], "referencesData": [{"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Advisory", "comment": "Description of general problem"}, {"url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2680", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/113e89fb08b1b6b072d60b3e4737ed407c13db9a", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).\n\n", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-11620", "cveName": "CVE-2020-11620", "score": 8.1, "severity": "High", "publishDate": "2020-04-07T23:15:00", "references": ["https://github.com/advisories/GHSA-h4rc-386g-6m85", "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html", "https://github.com/FasterXML/jackson-databind/issues/2682", "https://github.com/FasterXML/jackson-databind/commit/77040d85e3eb6710508e6445640ae1a3d5e60c22"], "referencesData": [{"url": "https://github.com/advisories/GHSA-h4rc-386g-6m85", "type": "Advisory", "comment": ""}, {"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Other", "comment": "Description of general problem"}, {"url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2682", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/77040d85e3eb6710508e6445640ae1a3d5e60c22", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly).", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-14060", "cveName": "CVE-2020-14060", "score": 8.1, "severity": "High", "publishDate": "2020-06-14T11:49:00", "references": ["https://github.com/advisories/GHSA-j823-4qch-3rgm", "https://github.com/FasterXML/jackson-databind/issues/2688", "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "https://github.com/FasterXML/jackson-databind/commit/d1c67a0396e84c08d0558fbb843b5bd1f26e1921"], "referencesData": [{"url": "https://github.com/advisories/GHSA-j823-4qch-3rgm", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2688", "type": "Issue", "comment": ""}, {"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Other", "comment": "General problem description "}, {"url": "https://github.com/FasterXML/jackson-databind/commit/d1c67a0396e84c08d0558fbb843b5bd1f26e1921", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).\n\n", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-14061", "cveName": "CVE-2020-14061", "score": 8.1, "severity": "High", "publishDate": "2020-06-14T10:13:00", "references": ["https://github.com/advisories/GHSA-c2q3-4qrh-fm48", "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "https://github.com/FasterXML/jackson-databind/issues/2698", "https://github.com/FasterXML/jackson-databind/commit/5c8642aeae9c756b438ab7637c90ef3c77966e6e"], "referencesData": [{"url": "https://github.com/advisories/GHSA-c2q3-4qrh-fm48", "type": "Advisory", "comment": ""}, {"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Other", "comment": "General problem description"}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2698", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/5c8642aeae9c756b438ab7637c90ef3c77966e6e", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms).", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-14062", "cveName": "CVE-2020-14062", "score": 8.1, "severity": "High", "publishDate": "2020-06-13T23:00:00", "references": ["https://github.com/advisories/GHSA-c265-37vj-cwcc", "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "https://github.com/FasterXML/jackson-databind/issues/2704", "https://github.com/FasterXML/jackson-databind/commit/840eae2ca81c597a0010b2126f32dce17d384b70"], "referencesData": [{"url": "https://github.com/advisories/GHSA-c265-37vj-cwcc", "type": "Advisory", "comment": ""}, {"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Other", "comment": "General problem description "}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2704", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/840eae2ca81c597a0010b2126f32dce17d384b70", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-14195", "cveName": "CVE-2020-14195", "score": 8.1, "severity": "High", "publishDate": "2020-06-15T23:00:00", "references": ["https://github.com/advisories/GHSA-mc6h-4qgp-37qh", "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "https://github.com/FasterXML/jackson-databind/issues/2765", "https://github.com/FasterXML/jackson-databind/commit/f6d9c664f6d481703138319f6a0f1fdbddb3a259", "https://lists.debian.org/debian-lts-announce/2020/07/msg00001.html"], "referencesData": [{"url": "https://github.com/advisories/GHSA-mc6h-4qgp-37qh", "type": "Advisory", "comment": ""}, {"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Other", "comment": "Description of general problem "}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2765", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/f6d9c664f6d481703138319f6a0f1fdbddb3a259", "type": "Commit", "comment": ""}, {"url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00001.html", "type": "Mail Thread", "comment": ""}], "description": "FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-24616", "cveName": "CVE-2020-24616", "score": 8.1, "severity": "High", "publishDate": "2020-08-25T18:15:00", "references": ["https://github.com/advisories/GHSA-h3cw-g4mq-c5x2", "https://github.com/FasterXML/jackson-databind/issues/2814", "https://github.com/FasterXML/jackson-databind/commit/3d97153944f7de9c19c1b3637b33d3cf1fbbe4d7"], "referencesData": [{"url": "https://github.com/advisories/GHSA-h3cw-g4mq-c5x2", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2814", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/3d97153944f7de9c19c1b3637b33d3cf1fbbe4d7", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP).", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-24750", "cveName": "CVE-2020-24750", "score": 8.1, "severity": "High", "publishDate": "2020-09-17T19:15:00", "references": ["https://github.com/advisories/GHSA-qjw2-hr98-qgfh", "https://github.com/FasterXML/jackson-databind/issues/2798", "https://github.com/FasterXML/jackson-databind/commit/08fbfacf89a4a4c026a6227a1b470ab7a13e2e88", "https://security.netapp.com/advisory/ntap-20201009-0003/"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qjw2-hr98-qgfh", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2798", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/08fbfacf89a4a4c026a6227a1b470ab7a13e2e88", "type": "Commit", "comment": ""}, {"url": "https://security.netapp.com/advisory/ntap-20201009-0003/", "type": "Advisory", "comment": ""}], "description": "FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-25649", "cveName": "CVE-2020-25649", "score": 7.5, "severity": "High", "publishDate": "2020-12-03T17:15:00", "references": ["https://github.com/advisories/GHSA-288c-cq4h-88gq", "https://bugzilla.redhat.com/show_bug.cgi?id=1887664", "https://github.com/FasterXML/jackson-databind/issues/2589", "https://github.com/FasterXML/jackson-databind/commit/612f971b78c60202e9cd75a299050c8f2d724a59"], "referencesData": [{"url": "https://github.com/advisories/GHSA-288c-cq4h-88gq", "type": "Advisory", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1887664", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2589", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/612f971b78c60202e9cd75a299050c8f2d724a59", "type": "Commit", "comment": ""}], "description": "A flaw was found in FasterXML Jackson Databind before 2.6.7.4, 2.7.0 through 2.9.10.6, and 2.10.0 through 2.10.5, where it did not have entity expansion secured properly. This flaw makes it vulnerable to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-611", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-35490", "cveName": "CVE-2020-35490", "score": 8.1, "severity": "High", "publishDate": "2020-12-17T19:15:00", "references": ["https://github.com/advisories/GHSA-wh8g-3j2c-rqj5", "https://security.netapp.com/advisory/ntap-20210122-0005/", "https://github.com/FasterXML/jackson-databind/issues/2986", "https://github.com/FasterXML/jackson-databind/commit/41b8bdb5ccc1d8edb71acf1c8234da235a24249d"], "referencesData": [{"url": "https://github.com/advisories/GHSA-wh8g-3j2c-rqj5", "type": "Advisory", "comment": ""}, {"url": "https://security.netapp.com/advisory/ntap-20210122-0005/", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2986", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/41b8bdb5ccc1d8edb71acf1c8234da235a24249d", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-35491", "cveName": "CVE-2020-35491", "score": 8.1, "severity": "High", "publishDate": "2020-12-17T19:15:00", "references": ["https://github.com/advisories/GHSA-r3gr-cxrf-hg25", "https://security.netapp.com/advisory/ntap-20210122-0005/", "https://github.com/FasterXML/jackson-databind/issues/2986", "https://github.com/FasterXML/jackson-databind/commit/41b8bdb5ccc1d8edb71acf1c8234da235a24249d"], "referencesData": [{"url": "https://github.com/advisories/GHSA-r3gr-cxrf-hg25", "type": "Advisory", "comment": ""}, {"url": "https://security.netapp.com/advisory/ntap-20210122-0005/", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2986", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/41b8bdb5ccc1d8edb71acf1c8234da235a24249d", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource.", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-35728", "cveName": "CVE-2020-35728", "score": 8.1, "severity": "High", "publishDate": "2020-12-27T05:15:00", "references": ["https://github.com/advisories/GHSA-5r5r-6hpj-8gg9", "https://security.netapp.com/advisory/ntap-20210129-0007/", "https://github.com/FasterXML/jackson-databind/issues/2999", "https://github.com/FasterXML/jackson-databind/commit/1ca0388c2fb37ac6a06f1c188ae89c41e3e15e84"], "referencesData": [{"url": "https://github.com/advisories/GHSA-5r5r-6hpj-8gg9", "type": "Advisory", "comment": ""}, {"url": "https://security.netapp.com/advisory/ntap-20210129-0007/", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2999", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/1ca0388c2fb37ac6a06f1c188ae89c41e3e15e84", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-36179", "cveName": "CVE-2020-36179", "score": 8.1, "severity": "High", "publishDate": "2021-01-07T00:15:00", "references": ["https://github.com/advisories/GHSA-9gph-22xh-8x98", "https://www.tenable.com/cve/CVE-2020-36179", "https://github.com/FasterXML/jackson-databind/issues/3004", "https://github.com/FasterXML/jackson-databind/commit/3ded28aece694d0df39c9f0fa1ff385b14a8656b"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9gph-22xh-8x98", "type": "Advisory", "comment": ""}, {"url": "https://www.tenable.com/cve/CVE-2020-36179", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/3004", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/3ded28aece694d0df39c9f0fa1ff385b14a8656b", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-36180", "cveName": "CVE-2020-36180", "score": 8.1, "severity": "High", "publishDate": "2021-01-07T00:15:00", "references": ["https://github.com/advisories/GHSA-8c4j-34r4-xr8g", "https://www.tenable.com/cve/CVE-2020-36180", "https://github.com/FasterXML/jackson-databind/issues/3004", "https://github.com/FasterXML/jackson-databind/commit/3ded28aece694d0df39c9f0fa1ff385b14a8656b"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8c4j-34r4-xr8g", "type": "Advisory", "comment": ""}, {"url": "https://www.tenable.com/cve/CVE-2020-36180", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/3004", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/3ded28aece694d0df39c9f0fa1ff385b14a8656b", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-36181", "cveName": "CVE-2020-36181", "score": 8.1, "severity": "High", "publishDate": "2021-01-06T23:15:00", "references": ["https://github.com/advisories/GHSA-cvm9-fjm9-3572", "https://www.tenable.com/cve/CVE-2020-36181", "https://github.com/FasterXML/jackson-databind/issues/3004", "https://github.com/FasterXML/jackson-databind/commit/3ded28aece694d0df39c9f0fa1ff385b14a8656b"], "referencesData": [{"url": "https://github.com/advisories/GHSA-cvm9-fjm9-3572", "type": "Advisory", "comment": ""}, {"url": "https://www.tenable.com/cve/CVE-2020-36181", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/3004", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/3ded28aece694d0df39c9f0fa1ff385b14a8656b", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-36182", "cveName": "CVE-2020-36182", "score": 8.1, "severity": "High", "publishDate": "2021-01-07T00:15:00", "references": ["https://github.com/advisories/GHSA-89qr-369f-5m5x", "https://www.tenable.com/cve/CVE-2020-36182", "https://github.com/FasterXML/jackson-databind/issues/3004", "https://github.com/FasterXML/jackson-databind/commit/3ded28aece694d0df39c9f0fa1ff385b14a8656b"], "referencesData": [{"url": "https://github.com/advisories/GHSA-89qr-369f-5m5x", "type": "Advisory", "comment": ""}, {"url": "https://www.tenable.com/cve/CVE-2020-36182", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/3004", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/3ded28aece694d0df39c9f0fa1ff385b14a8656b", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-36183", "cveName": "CVE-2020-36183", "score": 8.1, "severity": "High", "publishDate": "2021-01-07T00:15:00", "references": ["https://github.com/advisories/GHSA-9m6f-7xcq-8vf8", "https://www.tenable.com/cve/CVE-2020-36183", "https://github.com/FasterXML/jackson-databind/issues/3003", "https://github.com/FasterXML/jackson-databind/commit/12e23c962ffb4cf1857c5461d72ae54cc8008f29"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9m6f-7xcq-8vf8", "type": "Advisory", "comment": ""}, {"url": "https://www.tenable.com/cve/CVE-2020-36183", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/3003", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/12e23c962ffb4cf1857c5461d72ae54cc8008f29", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-36184", "cveName": "CVE-2020-36184", "score": 8.1, "severity": "High", "publishDate": "2021-01-06T23:15:00", "references": ["https://github.com/advisories/GHSA-m6x4-97wx-4q27", "https://www.tenable.com/cve/CVE-2020-36184", "https://github.com/FasterXML/jackson-databind/issues/2998", "https://github.com/FasterXML/jackson-databind/commit/567194c53ae91f0a14dc27239afb739b1c10448a"], "referencesData": [{"url": "https://github.com/advisories/GHSA-m6x4-97wx-4q27", "type": "Advisory", "comment": ""}, {"url": "https://www.tenable.com/cve/CVE-2020-36184", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2998", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/567194c53ae91f0a14dc27239afb739b1c10448a", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-36185", "cveName": "CVE-2020-36185", "score": 8.1, "severity": "High", "publishDate": "2021-01-06T23:15:00", "references": ["https://github.com/advisories/GHSA-8w26-6f25-cm9x", "https://www.tenable.com/cve/CVE-2020-36185", "https://github.com/FasterXML/jackson-databind/issues/2998", "https://github.com/FasterXML/jackson-databind/commit/567194c53ae91f0a14dc27239afb739b1c10448a"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8w26-6f25-cm9x", "type": "Advisory", "comment": ""}, {"url": "https://www.tenable.com/cve/CVE-2020-36185", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2998", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/567194c53ae91f0a14dc27239afb739b1c10448a", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-12086", "cveName": "CVE-2019-12086", "score": 7.5, "severity": "High", "publishDate": "2019-05-17T17:29:00", "references": ["https://github.com/advisories/GHSA-5ww9-j83m-q7qx", "https://seclists.org/bugtraq/2019/May/68", "https://github.com/FasterXML/jackson-databind/issues/2326", "https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.9", "https://github.com/FasterXML/jackson-databind/commit/dda513bd7251b4f32b7b60b1c13740e3b5a43024", "https://github.com/FasterXML/jackson-databind/commit/efc3c0d02f4743dbaa6d1b9c466772a2f13d966b"], "referencesData": [{"url": "https://github.com/advisories/GHSA-5ww9-j83m-q7qx", "type": "Advisory", "comment": ""}, {"url": "https://seclists.org/bugtraq/2019/May/68", "type": "Advisory", "comment": "seclists"}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2326", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.9", "type": "Release Note", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/dda513bd7251b4f32b7b60b1c13740e3b5a43024", "type": "Commit", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/efc3c0d02f4743dbaa6d1b9c466772a2f13d966b", "type": "Commit", "comment": "Backport to 2.8 (version 2.8.11.4)"}], "description": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.7.9.6, 2.8.x before 2.8.11.4, 2.9.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "NONE", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-12384", "cveName": "CVE-2019-12384", "score": 5.9, "severity": "Medium", "publishDate": "2019-06-24T16:15:15", "references": ["https://github.com/advisories/GHSA-mph4-vhrx-mv67", "https://lists.debian.org/debian-lts-announce/2019/06/msg00019.html", "https://github.com/FasterXML/jackson-databind/issues/2334", "https://github.com/FasterXML/jackson-databind/commit/c9ef4a10d6f6633cf470d6a469514b68fa2be234", "https://blog.doyensec.com/2019/07/22/jackson-gadgets.html"], "referencesData": [{"url": "https://github.com/advisories/GHSA-mph4-vhrx-mv67", "type": "Advisory", "comment": ""}, {"url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00019.html", "type": "Mail Thread", "comment": "Debian"}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2334", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/c9ef4a10d6f6633cf470d6a469514b68fa2be234", "type": "Commit", "comment": ""}, {"url": "https://blog.doyensec.com/2019/07/22/jackson-gadgets.html", "type": "POC/Exploit", "comment": ""}], "description": "FasterXML jackson-databind 2.x up to 2.9.9 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible. ", "cvss": {"score": 5.9, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.3, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "NONE", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 5.9, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-12814", "cveName": "CVE-2019-12814", "score": 5.9, "severity": "Medium", "publishDate": "2019-06-19T14:15:00", "references": ["https://github.com/advisories/GHSA-cmfg-87vq-g5g4", "https://lists.debian.org/debian-lts-announce/2019/06/msg00019.html", "https://github.com/FasterXML/jackson-databind/issues/2341", "https://github.com/FasterXML/jackson-databind/commit/5f7c69bba07a7155adde130d9dee2e54a54f1fa5"], "referencesData": [{"url": "https://github.com/advisories/GHSA-cmfg-87vq-g5g4", "type": "Advisory", "comment": ""}, {"url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00019.html", "type": "Advisory", "comment": "Debian"}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2341", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/5f7c69bba07a7155adde130d9dee2e54a54f1fa5", "type": "Commit", "comment": ""}], "description": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has JDOM 1.x or 2.x jar in the classpath, an attacker can send a specifically crafted JSON message that allows them to read arbitrary local files on the server.", "cvss": {"score": 5.9, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.3, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "NONE", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 5.9, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-14379", "cveName": "CVE-2019-14379", "score": 9.8, "severity": "Critical", "publishDate": "2019-07-29T12:15:16", "references": ["https://github.com/FasterXML/jackson-databind/issues/2387", "https://github.com/FasterXML/jackson-databind/commit/ad418eeb974e357f2797aef64aa0e3ffaaa6125b", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14379", "https://github.com/advisories/GHSA-6fpp-rgj9-8rwc"], "referencesData": [{"url": "https://github.com/FasterXML/jackson-databind/issues/2387", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/ad418eeb974e357f2797aef64aa0e3ffaaa6125b", "type": "Commit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14379", "type": "Advisory", "comment": "Bugzilla"}, {"url": "https://github.com/advisories/GHSA-6fpp-rgj9-8rwc", "type": "Advisory", "comment": ""}], "description": "SubTypeValidator.java in FasterXML jackson-databind before 2.10.0.pr2, 2.9.9.2, 2.8.11.4, 2.7.9.6 and 2.6.7.3 mishandles default typing when ehcache is used, leading to remote code execution.", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "High", "cvss3Severity": null}, {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1321", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-14439", "cveName": "CVE-2019-14439", "score": 7.5, "severity": "High", "publishDate": "2019-07-30T11:15:00", "references": ["https://github.com/FasterXML/jackson-databind/issues/2389", "https://github.com/FasterXML/jackson-databind/commit/ad418eeb974e357f2797aef64aa0e3ffaaa6125b"], "referencesData": [{"url": "https://github.com/FasterXML/jackson-databind/issues/2389", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/ad418eeb974e357f2797aef64aa0e3ffaaa6125b", "type": "Commit", "comment": ""}], "description": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before2.10.0.pr2, 2.9.9.2, 2.8.11.4 and 2.7.9.6. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "NONE", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-14540", "cveName": "CVE-2019-14540", "score": 9.8, "severity": "Critical", "publishDate": "2019-09-15T22:15:00", "references": ["https://github.com/advisories/GHSA-h822-r4r5-v8jg", "https://github.com/FasterXML/jackson-databind/blob/jackson-databind-2.9.10/release-notes/VERSION-2.x#L19-L20", "https://github.com/FasterXML/jackson-databind/issues/2410", "https://github.com/FasterXML/jackson-databind/commit/d4983c740fec7d5576b207a8c30a63d3ea7443de", "https://github.com/FasterXML/jackson-databind/commit/a3939d36edcc755c8af55bdc1969e0fa8438f9db"], "referencesData": [{"url": "https://github.com/advisories/GHSA-h822-r4r5-v8jg", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/blob/jackson-databind-2.9.10/release-notes/VERSION-2.x#L19-L20", "type": "Release Note", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2410", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/d4983c740fec7d5576b207a8c30a63d3ea7443de", "type": "Commit", "comment": "master"}, {"url": "https://github.com/FasterXML/jackson-databind/commit/a3939d36edcc755c8af55bdc1969e0fa8438f9db", "type": "Commit", "comment": "v2.6.7.3"}], "description": "A Polymorphic Typing issue was discovered in FasterXML before 2.6.7.3, 2.7.x before 2.7.9.7, 2.8.x before 2.8.11.5 and 2.9.x before 2.9.10, jackson-databind, regarding HikariConfig via HikariDataSource.", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-14892", "cveName": "CVE-2019-14892", "score": 9.8, "severity": "Critical", "publishDate": "2020-03-02T17:15:00", "references": ["https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14892", "https://github.com/FasterXML/jackson-databind/issues/2462", "https://github.com/FasterXML/jackson-databind/commit/41b7f9b90149e9d44a65a8261a8deedc7186f6af", "https://github.com/FasterXML/jackson-databind/commit/a3939d36edcc755c8af55bdc1969e0fa8438f9db"], "referencesData": [{"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Advisory", "comment": "Description of general problem"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14892", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2462", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/41b7f9b90149e9d44a65a8261a8deedc7186f6af", "type": "Commit", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/a3939d36edcc755c8af55bdc1969e0fa8438f9db", "type": "Commit", "comment": "Backport for 2.6.7.3"}], "description": "A flaw was discovered in jackson-databind in versions before 2.6.7.3, 2.7.x before 2.7.9.7, 2.8.x before 2.8.11.5 and 2.9.x before 2.9.10 where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An attacker could use this flaw to execute arbitrary code.", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "High", "cvss3Severity": null}, {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-14893", "cveName": "CVE-2019-14893", "score": 9.8, "severity": "Critical", "publishDate": "2020-03-02T21:15:00", "references": ["https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14893", "https://github.com/FasterXML/jackson-databind/issues/2469", "https://github.com/FasterXML/jackson-databind/commit/998efd708284778f29d83d7962a9bd935c228317", "https://github.com/FasterXML/jackson-databind/commit/a3939d36edcc755c8af55bdc1969e0fa8438f9db"], "referencesData": [{"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "type": "Advisory", "comment": "Description of general problem"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14893", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2469", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/998efd708284778f29d83d7962a9bd935c228317", "type": "Commit", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/a3939d36edcc755c8af55bdc1969e0fa8438f9db", "type": "Commit", "comment": "Backport for 2.6.7.3"}], "description": "A flaw was discovered in FasterXML jackson-databind in all versions before 2.6.7.3, 2.7.x before 2.7.9.7, 2.8.x before 2.8.11.5 and 2.9.x before 2.9.10, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "High", "cvss3Severity": null}, {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-9547", "cveName": "CVE-2020-9547", "score": 9.8, "severity": "Critical", "publishDate": "2020-03-02T04:15:00", "references": ["https://github.com/advisories/GHSA-q93h-jc49-78gg", "https://lists.debian.org/debian-lts-announce/2020/03/msg00008.html", "https://github.com/FasterXML/jackson-databind/issues/2634", "https://github.com/FasterXML/jackson-databind/commit/1e64db6a2fad331f96c7363fda3bc5f3dffa25bb"], "referencesData": [{"url": "https://github.com/advisories/GHSA-q93h-jc49-78gg", "type": "Advisory", "comment": ""}, {"url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00008.html", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2634", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/1e64db6a2fad331f96c7363fda3bc5f3dffa25bb", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-9548", "cveName": "CVE-2020-9548", "score": 9.8, "severity": "Critical", "publishDate": "2020-03-02T04:15:00", "references": ["https://github.com/advisories/GHSA-p43x-xfjf-5jhr", "https://lists.debian.org/debian-lts-announce/2020/03/msg00008.html", "https://github.com/FasterXML/jackson-databind/issues/2634", "https://github.com/FasterXML/jackson-databind/commit/1e64db6a2fad331f96c7363fda3bc5f3dffa25bb"], "referencesData": [{"url": "https://github.com/advisories/GHSA-p43x-xfjf-5jhr", "type": "Advisory", "comment": ""}, {"url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00008.html", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2634", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/1e64db6a2fad331f96c7363fda3bc5f3dffa25bb", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-20190", "cveName": "CVE-2021-20190", "score": 8.1, "severity": "High", "publishDate": "2021-01-19T17:15:00", "references": ["https://github.com/advisories/GHSA-5949-rw7g-wx7w", "https://github.com/FasterXML/jackson-databind/issues/2854", "https://bugzilla.redhat.com/show_bug.cgi?id=1916633", "https://github.com/FasterXML/jackson-databind/commit/7dbf51bf78d157098074a20bd9da39bd48c18e4a"], "referencesData": [{"url": "https://github.com/advisories/GHSA-5949-rw7g-wx7w", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2854", "type": "Issue", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1916633", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/7dbf51bf78d157098074a20bd9da39bd48c18e4a", "type": "Commit", "comment": ""}], "description": "A flaw was found in jackson-databind before 2.9.10.7, 2.10.x before 2.10.5.1 and 2.11.x before 2.11.3. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.3, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "COMPLETE", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "High", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-42003", "cveName": "CVE-2022-42003", "score": 7.5, "severity": "High", "publishDate": "2022-10-02T05:15:00", "references": ["https://github.com/advisories/GHSA-jjjh-jjxp-wpff", "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51020", "https://github.com/FasterXML/jackson-databind/issues/3590", "https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33", "https://github.com/FasterXML/jackson-databind/blob/jackson-databind-2.14.0-rc1/release-notes/VERSION-2.x#L7"], "referencesData": [{"url": "https://github.com/advisories/GHSA-jjjh-jjxp-wpff", "type": "Advisory", "comment": ""}, {"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51020", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/3590", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33", "type": "Commit", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/blob/jackson-databind-2.14.0-rc1/release-notes/VERSION-2.x#L7", "type": "Release Note", "comment": ""}], "description": "In FasterXML jackson-databind before 2.14.0-rc1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the \"UNWRAP_SINGLE_VALUE_ARRAYS\" feature is enabled.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-42004", "cveName": "CVE-2022-42004", "score": 7.5, "severity": "High", "publishDate": "2022-10-02T05:15:00", "references": ["https://github.com/advisories/GHSA-rgv9-q543-rqg4", "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50490", "https://github.com/FasterXML/jackson-databind/issues/3582", "https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88", "https://github.com/FasterXML/jackson-databind/blob/jackson-databind-2.13.4/release-notes/VERSION-2.x#L7"], "referencesData": [{"url": "https://github.com/advisories/GHSA-rgv9-q543-rqg4", "type": "Advisory", "comment": ""}, {"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50490", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/3582", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88", "type": "Commit", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/blob/jackson-databind-2.13.4/release-notes/VERSION-2.x#L7", "type": "Release Note", "comment": ""}], "description": "In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in \"BeanDeserializer._deserializeFromArray\" to prevent the use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-36186", "cveName": "CVE-2020-36186", "score": 8.1, "severity": "High", "publishDate": "2021-01-06T23:15:00", "references": ["https://github.com/advisories/GHSA-v585-23hc-c647", "https://www.tenable.com/cve/CVE-2020-36186", "https://github.com/FasterXML/jackson-databind/issues/2997", "https://github.com/FasterXML/jackson-databind/commit/3e8fa3beea49ea62109df9e643c9cb678dabdde1"], "referencesData": [{"url": "https://github.com/advisories/GHSA-v585-23hc-c647", "type": "Advisory", "comment": ""}, {"url": "https://www.tenable.com/cve/CVE-2020-36186", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2997", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/3e8fa3beea49ea62109df9e643c9cb678dabdde1", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-36187", "cveName": "CVE-2020-36187", "score": 8.1, "severity": "High", "publishDate": "2021-01-06T23:15:00", "references": ["https://github.com/advisories/GHSA-r695-7vr9-jgc2", "https://www.tenable.com/cve/CVE-2020-36187", "https://github.com/FasterXML/jackson-databind/issues/2997", "https://github.com/FasterXML/jackson-databind/commit/3e8fa3beea49ea62109df9e643c9cb678dabdde1"], "referencesData": [{"url": "https://github.com/advisories/GHSA-r695-7vr9-jgc2", "type": "Advisory", "comment": ""}, {"url": "https://www.tenable.com/cve/CVE-2020-36187", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2997", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/3e8fa3beea49ea62109df9e643c9cb678dabdde1", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-36188", "cveName": "CVE-2020-36188", "score": 8.1, "severity": "High", "publishDate": "2021-01-06T23:15:00", "references": ["https://github.com/advisories/GHSA-f9xh-2qgp-cq57", "https://www.tenable.com/cve/CVE-2020-36188", "https://github.com/FasterXML/jackson-databind/issues/2996", "https://github.com/FasterXML/jackson-databind/commit/33d96c13fe18a2dad01b19ce195548c9acea9da4"], "referencesData": [{"url": "https://github.com/advisories/GHSA-f9xh-2qgp-cq57", "type": "Advisory", "comment": ""}, {"url": "https://www.tenable.com/cve/CVE-2020-36188", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2996", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/33d96c13fe18a2dad01b19ce195548c9acea9da4", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-36189", "cveName": "CVE-2020-36189", "score": 8.1, "severity": "High", "publishDate": "2021-01-06T23:15:00", "references": ["https://github.com/advisories/GHSA-vfqx-33qm-g869", "https://www.tenable.com/cve/CVE-2020-36189", "https://github.com/FasterXML/jackson-databind/issues/2996", "https://github.com/FasterXML/jackson-databind/commit/33d96c13fe18a2dad01b19ce195548c9acea9da4"], "referencesData": [{"url": "https://github.com/advisories/GHSA-vfqx-33qm-g869", "type": "Advisory", "comment": ""}, {"url": "https://www.tenable.com/cve/CVE-2020-36189", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2996", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/33d96c13fe18a2dad01b19ce195548c9acea9da4", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-36518", "cveName": "CVE-2020-36518", "score": 7.5, "severity": "High", "publishDate": "2022-03-11T07:15:00", "references": ["https://github.com/FasterXML/jackson-databind/issues/2816", "https://github.com/advisories/GHSA-57j2-w4cx-62h2", "https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12", "https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13", "https://github.com/FasterXML/jackson-databind/commit/fcfc4998ec23f0b1f7f8a9521c2b317b6c25892b", "https://github.com/FasterXML/jackson-databind/pull/3416"], "referencesData": [{"url": "https://github.com/FasterXML/jackson-databind/issues/2816", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-57j2-w4cx-62h2", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12", "type": "Release Note", "comment": "Jackson-Release-2.12"}, {"url": "https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13", "type": "Release Note", "comment": "Jackson-Release-2.13"}, {"url": "https://github.com/FasterXML/jackson-databind/commit/fcfc4998ec23f0b1f7f8a9521c2b317b6c25892b", "type": "Commit", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/pull/3416", "type": "Pull request", "comment": ""}], "description": "jackson-databind before 2.12.6.1 and 2.13.x before 2.13.2.1 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-8840", "cveName": "CVE-2020-8840", "score": 9.8, "severity": "Critical", "publishDate": "2020-02-10T21:56:00", "references": ["https://github.com/FasterXML/jackson-databind/issues/2620", "https://github.com/FasterXML/jackson-databind/commit/914e7c9f2cb8ce66724bf26a72adc7e958992497"], "referencesData": [{"url": "https://github.com/FasterXML/jackson-databind/issues/2620", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/914e7c9f2cb8ce66724bf26a72adc7e958992497", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-9546", "cveName": "CVE-2020-9546", "score": 9.8, "severity": "Critical", "publishDate": "2020-03-02T04:15:00", "references": ["https://github.com/advisories/GHSA-5p34-5m6p-p58g", "https://lists.debian.org/debian-lts-announce/2020/03/msg00008.html", "https://github.com/FasterXML/jackson-databind/issues/2631", "https://github.com/FasterXML/jackson-databind/commit/1e64db6a2fad331f96c7363fda3bc5f3dffa25bb"], "referencesData": [{"url": "https://github.com/advisories/GHSA-5p34-5m6p-p58g", "type": "Advisory", "comment": ""}, {"url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00008.html", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/issues/2631", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-databind/commit/1e64db6a2fad331f96c7363fda3bc5f3dffa25bb", "type": "Commit", "comment": ""}], "description": "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.core:jackson-databind-2.9.8", "similarityId": null, "fixResolutionText": "2.12.7.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-28491", "cveName": "CVE-2020-28491", "score": 7.5, "severity": "High", "publishDate": "2021-02-18T16:15:00", "references": ["https://github.com/advisories/GHSA-xmc8-26q4-qjhx", "https://github.com/FasterXML/jackson-dataformats-binary/issues/186", "https://github.com/FasterXML/jackson-dataformats-binary/commit/de072d314af8f5f269c8abec6930652af67bc8e6"], "referencesData": [{"url": "https://github.com/advisories/GHSA-xmc8-26q4-qjhx", "type": "Advisory", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-dataformats-binary/issues/186", "type": "Issue", "comment": ""}, {"url": "https://github.com/FasterXML/jackson-dataformats-binary/commit/de072d314af8f5f269c8abec6930652af67bc8e6", "type": "Commit", "comment": ""}], "description": "This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.fasterxml.jackson.dataformat:jackson-dataformat-cbor-2.6.7", "similarityId": null, "fixResolutionText": "2.11.4", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-25647", "cveName": "CVE-2022-25647", "score": 7.5, "severity": "High", "publishDate": "2022-05-01T16:15:08", "references": ["https://github.com/advisories/GHSA-4jrv-ppp4-jm57", "https://github.com/google/gson/pull/1991", "https://github.com/google/gson/commit/e6fae590cf2a758c47cd5a17f9bf3780ce62c986", "https://github.com/google/gson/releases/tag/gson-parent-2.8.9"], "referencesData": [{"url": "https://github.com/advisories/GHSA-4jrv-ppp4-jm57", "type": "Advisory", "comment": ""}, {"url": "https://github.com/google/gson/pull/1991", "type": "Pull request", "comment": ""}, {"url": "https://github.com/google/gson/commit/e6fae590cf2a758c47cd5a17f9bf3780ce62c986", "type": "Commit", "comment": ""}, {"url": "https://github.com/google/gson/releases/tag/gson-parent-2.8.9", "type": "Release Note", "comment": ""}], "description": "The package com.google.code.gson:gson prior to 2.8.9 is vulnerable to Deserialization of Untrusted Data via the 'writeReplace()' method in internal classes, which may lead to DoS attacks.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.google.code.gson:gson-2.8.7", "similarityId": null, "fixResolutionText": "2.8.9", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-8908", "cveName": "CVE-2020-8908", "score": 3.3, "severity": "Low", "publishDate": "2020-12-10T23:15:00", "references": ["https://github.com/advisories/GHSA-5mg8-w23w-74h3", "https://github.com/google/guava/issues/4011", "https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284", "https://github.com/google/guava/commit/fec0dbc4634006a6162cfd4d0d09c962073ddf40"], "referencesData": [{"url": "https://github.com/advisories/GHSA-5mg8-w23w-74h3", "type": "Advisory", "comment": ""}, {"url": "https://github.com/google/guava/issues/4011", "type": "Issue", "comment": ""}, {"url": "https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284", "type": "Commit", "comment": "Initial fix"}, {"url": "https://github.com/google/guava/commit/fec0dbc4634006a6162cfd4d0d09c962073ddf40", "type": "Commit", "comment": "Additional fix"}], "description": "A temp directory creation vulnerability exist in Guava versions prior to 30.0 allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava com.google.common.io.Files.createTempDir(). The permissions granted to the directory created default to the standard unix-like /tmp ones, leaving the files open. We recommend updating Guava to version 30.0 or later, or update to Java 7 or later, or to explicitly change the permissions after the creation of the directory if neither are possible.", "cvss": {"score": 3.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 2.1, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "NONE", "exploitCodeMaturity": "3.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 3.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Maven-com.google.guava:guava-30.1.1-jre", "similarityId": null, "fixResolutionText": "32.0.0.jre-redhat-00001", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-732", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2023-2976", "cveName": "CVE-2023-2976", "score": 7.1, "severity": "High", "publishDate": "2023-06-14T18:15:00", "references": ["https://github.com/advisories/GHSA-7g45-4rm6-3mm3", "https://github.com/google/guava/issues/2575", "https://github.com/google/guava/issues/6532", "https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284", "https://github.com/google/guava/releases/tag/v32.0.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-7g45-4rm6-3mm3", "type": "Advisory", "comment": ""}, {"url": "https://github.com/google/guava/issues/2575", "type": "Issue", "comment": ""}, {"url": "https://github.com/google/guava/issues/6532", "type": "Issue", "comment": ""}, {"url": "https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284", "type": "Commit", "comment": ""}, {"url": "https://github.com/google/guava/releases/tag/v32.0.0", "type": "Release Note", "comment": ""}], "description": "Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 through 31.1-jre on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class. Even though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.\n", "cvss": {"score": 7.1, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.1, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.google.guava:guava-30.1.1-jre", "similarityId": null, "fixResolutionText": "32.0.0.jre-redhat-00001", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-379", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-22573", "cveName": "CVE-2021-22573", "score": 7.3, "severity": "High", "publishDate": "2022-05-03T16:15:00", "references": ["https://github.com/advisories/GHSA-hw42-3568-wj87", "https://github.com/advisories/GHSA-xh97-72ww-2w58", "https://github.com/googleapis/google-oauth-java-client/pull/861", "https://github.com/googleapis/google-oauth-java-client/commit/22419d60579ef4c1a8a256a90e6ca7bc58f09aa1", "https://github.com/googleapis/google-oauth-java-client/releases/tag/v1.33.3", "https://github.com/googleapis/google-oauth-java-client/issues/786"], "referencesData": [{"url": "https://github.com/advisories/GHSA-hw42-3568-wj87", "type": "Advisory", "comment": ""}, {"url": "https://github.com/advisories/GHSA-xh97-72ww-2w58", "type": "Advisory", "comment": ""}, {"url": "https://github.com/googleapis/google-oauth-java-client/pull/861", "type": "Pull request", "comment": ""}, {"url": "https://github.com/googleapis/google-oauth-java-client/commit/22419d60579ef4c1a8a256a90e6ca7bc58f09aa1", "type": "Commit", "comment": ""}, {"url": "https://github.com/googleapis/google-oauth-java-client/releases/tag/v1.33.3", "type": "Release Note", "comment": ""}, {"url": "https://github.com/googleapis/google-oauth-java-client/issues/786", "type": "Issue", "comment": ""}], "description": "The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sure that the token's payload comes from valid provider, not from someone else. An attacker can provide a compromised token with custom payload. The token will pass the validation on the client side. We recommend upgrading to version 1.33.3 or above.", "cvss": {"score": 7.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 3.5, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": "6.8", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 7.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.google.oauth-client:google-oauth-client-1.31.5", "similarityId": null, "fixResolutionText": "1.33.3", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-347", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-3171", "cveName": "CVE-2022-3171", "score": 7.5, "severity": "High", "publishDate": "2022-10-12T01:16:00", "references": ["https://github.com/advisories/GHSA-h4h5-3hr4-j3g2", "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48771", "https://github.com/protocolbuffers/protobuf/releases/tag/v21.7", "https://github.com/protocolbuffers/protobuf/pull/10672", "https://github.com/protocolbuffers/protobuf/commit/9a6781e476eac2c1b06764941addb60928520c71"], "referencesData": [{"url": "https://github.com/advisories/GHSA-h4h5-3hr4-j3g2", "type": "Advisory", "comment": ""}, {"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48771", "type": "Issue", "comment": ""}, {"url": "https://github.com/protocolbuffers/protobuf/releases/tag/v21.7", "type": "Release Note", "comment": ""}, {"url": "https://github.com/protocolbuffers/protobuf/pull/10672", "type": "Pull request", "comment": ""}, {"url": "https://github.com/protocolbuffers/protobuf/commit/9a6781e476eac2c1b06764941addb60928520c71", "type": "Commit", "comment": ""}], "description": "A parsing issue with binary data in protobuf-java core and lite versions prior to 3.16.3, 3.17.0-rc-1 prior to 3.19.6, 3.20.0-rc-1 prior to 3.20.3 and 3.21.0-rc-1 prior to 3.21.7 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend updating to the versions mentioned above.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.google.protobuf:protobuf-java-3.17.3", "similarityId": null, "fixResolutionText": "3.25.5", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-22569", "cveName": "CVE-2021-22569", "score": 5.5, "severity": "Medium", "publishDate": "2022-01-10T14:10:00", "references": ["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39330", "https://www.openwall.com/lists/oss-security/2022/01/12/4", "https://github.com/protocolbuffers/protobuf/commit/c555c3dd14feb25d6283cbbd4903fe8108667c72", "https://github.com/advisories/GHSA-wrvw-hg22-4m67", "https://github.com/protocolbuffers/protobuf/pull/9371", "https://cloud.google.com/support/bulletins#gcp-2022-001"], "referencesData": [{"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39330", "type": "Issue", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2022/01/12/4", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/protocolbuffers/protobuf/commit/c555c3dd14feb25d6283cbbd4903fe8108667c72", "type": "Commit", "comment": ""}, {"url": "https://github.com/advisories/GHSA-wrvw-hg22-4m67", "type": "Advisory", "comment": ""}, {"url": "https://github.com/protocolbuffers/protobuf/pull/9371", "type": "Pull request", "comment": ""}, {"url": "https://cloud.google.com/support/bulletins#gcp-2022-001", "type": "Advisory", "comment": ""}], "description": "An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived objects that cause frequent, repeated pauses. We recommend upgrading libraries beyond the vulnerable versions. The was released for \"protobuf-java\" package in versions 3.16.1, 3.18.2, and 3.19.2, \"protobuf-kotlin\" package in 3.18.2 and 3.19.2, and \"google-protobuf\" RubyGems package in version 3.19.2.", "cvss": {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.3, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-com.google.protobuf:protobuf-java-3.17.3", "similarityId": null, "fixResolutionText": "3.25.5", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-696", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-3509", "cveName": "CVE-2022-3509", "score": 7.5, "severity": "High", "publishDate": "2022-12-12T13:15:14", "references": ["https://github.com/advisories/GHSA-g5ww-5jh7-63cx", "https://github.com/protocolbuffers/protobuf/pull/10673", "https://github.com/protocolbuffers/protobuf/commit/a3888f53317a8018e7a439bac4abeb8f3425d5e9"], "referencesData": [{"url": "https://github.com/advisories/GHSA-g5ww-5jh7-63cx", "type": "Advisory", "comment": ""}, {"url": "https://github.com/protocolbuffers/protobuf/pull/10673", "type": "Pull request", "comment": ""}, {"url": "https://github.com/protocolbuffers/protobuf/commit/a3888f53317a8018e7a439bac4abeb8f3425d5e9", "type": "Commit", "comment": ""}], "description": "A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and javalite versions prior to 3.16.3, 3.17.x prior to 3.19.6, 3.20.x prior to 3.20.3, 3.21.x prior to 3.21.7, and 4.0.0-rc-1, 4.0.0-rc-2 lead to a Denial of Service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields cause objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend updating to the versions mentioned above.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.google.protobuf:protobuf-java-3.17.3", "similarityId": null, "fixResolutionText": "3.25.5", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-3510", "cveName": "CVE-2022-3510", "score": 7.5, "severity": "High", "publishDate": "2022-12-12T13:15:00", "references": ["https://github.com/advisories/GHSA-4gg5-vx3j-xwc7", "https://github.com/protocolbuffers/protobuf/pull/10729", "https://github.com/protocolbuffers/protobuf/commit/db7c17803320525722f45c1d26fc08bc41d1bf48"], "referencesData": [{"url": "https://github.com/advisories/GHSA-4gg5-vx3j-xwc7", "type": "Advisory", "comment": ""}, {"url": "https://github.com/protocolbuffers/protobuf/pull/10729", "type": "Pull request", "comment": ""}, {"url": "https://github.com/protocolbuffers/protobuf/commit/db7c17803320525722f45c1d26fc08bc41d1bf48", "type": "Commit", "comment": ""}], "description": "A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions through 3.16.2, 3.17.0-rc-1 through 3.19.5, 3.20.0-rc-1 through 3.20.2, 3.21.0-rc-1 through 3.21.6, and 4.0.0-rc-1 through 4.0.0-rc-2 can lead to a Denial-of-Service (DoS) attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend updating to the versions mentioned above.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.google.protobuf:protobuf-java-3.17.3", "similarityId": null, "fixResolutionText": "3.25.5", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2024-7254", "cveName": "CVE-2024-7254", "score": 8.7, "severity": "High", "publishDate": "2024-09-19T01:15:10", "references": ["https://github.com/advisories/GHSA-735f-pc8j-v9w8", "https://github.com/protocolbuffers/protobuf/commit/4a197e78ad2430e22e992c5a7727b61ae220f727", "https://github.com/protocolbuffers/protobuf/pull/18387", "https://github.com/protocolbuffers/protobuf/releases/tag/v25.5"], "referencesData": [{"url": "https://github.com/advisories/GHSA-735f-pc8j-v9w8", "type": "Advisory", "comment": ""}, {"url": "https://github.com/protocolbuffers/protobuf/commit/4a197e78ad2430e22e992c5a7727b61ae220f727", "type": "Commit", "comment": ""}, {"url": "https://github.com/protocolbuffers/protobuf/pull/18387", "type": "Pull request", "comment": ""}, {"url": "https://github.com/protocolbuffers/protobuf/releases/tag/v25.5", "type": "Release Note", "comment": ""}], "description": "Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups/series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser, or against Protobuf map fields, creates unbounded recursions that an attacker can abuse. This issue affects version prior to 3.25.5, 4.0.x prior to 4.27.5, 4.28.x prior to 4.28.2.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.google.protobuf:protobuf-java-3.17.3", "similarityId": null, "fixResolutionText": "3.25.5", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "Cx78f40514-81ff", "cveName": "Cx78f40514-81ff", "score": 7.5, "severity": "High", "publishDate": "2018-10-31T12:00:00", "references": ["https://issues.apache.org/jira/browse/COLLECTIONS-701", "https://github.com/apache/commons-collections/pull/57", "https://github.com/apache/commons-collections/commit/1979a6e31067a18c9ede59ad4518f738512eba82"], "referencesData": [{"url": "https://issues.apache.org/jira/browse/COLLECTIONS-701", "type": "Issue", "comment": ""}, {"url": "https://github.com/apache/commons-collections/pull/57", "type": "Pull request", "comment": ""}, {"url": "https://github.com/apache/commons-collections/commit/1979a6e31067a18c9ede59ad4518f738512eba82", "type": "Commit", "comment": ""}], "description": "The framework Apache Commons Collections before 4.3 is vulnerable to Stack Overflow. The function `add()` in the file `SetUniqueList.java` throws a StackOverflowError when the `add()` method is called with its own list. Please note: the package name was changed from \"commons-collections:commons-collections\" to \"org.apache.commons:commons-collections4\" on version 4.0.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-commons-collections:commons-collections-3.2.2", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-674", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2024-47554", "cveName": "CVE-2024-47554", "score": 8.7, "severity": "High", "publishDate": "2024-10-03T12:15:02", "references": ["https://github.com/advisories/GHSA-78wr-2p64-hpwj", "https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1", "https://github.com/apache/commons-io/commit/06fde31494c279ad940149e1a3d4944040c73c0d"], "referencesData": [{"url": "https://github.com/advisories/GHSA-78wr-2p64-hpwj", "type": "Advisory", "comment": ""}, {"url": "https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/apache/commons-io/commit/06fde31494c279ad940149e1a3d4944040c73c0d", "type": "Commit", "comment": ""}], "description": "Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The \"org.apache.commons.io.input.XmlStreamReader\" class may excessively consume CPU resources when processing maliciously crafted input. This issue affects commons-io:commons-io package versions 2.0 through 2.13.0. Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.\n", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-commons-io:commons-io-2.6", "similarityId": null, "fixResolutionText": "2.11.0.redhat-00004", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-29425", "cveName": "CVE-2021-29425", "score": 4.8, "severity": "Medium", "publishDate": "2021-04-13T07:15:12", "references": ["https://github.com/advisories/GHSA-gwrp-pvrq-jmwv", "https://issues.apache.org/jira/browse/IO-559", "https://github.com/apache/commons-io/commit/2736b6fe0b3fa22ec8e2b4184897ecadb021fc78"], "referencesData": [{"url": "https://github.com/advisories/GHSA-gwrp-pvrq-jmwv", "type": "Advisory", "comment": ""}, {"url": "https://issues.apache.org/jira/browse/IO-559", "type": "Issue", "comment": ""}, {"url": "https://github.com/apache/commons-io/commit/2736b6fe0b3fa22ec8e2b4184897ecadb021fc78", "type": "Commit", "comment": ""}], "description": "In Commons IO versions 1.1 through 2.6, when invoking the method \"FileNameUtils.normalize\" with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value. Other projects and packages that embed the Apache Commons IO code are affected, an example is \"com.cosium.vet:vet\".", "cvss": {"score": 4.8, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "NONE", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 4.8, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-commons-io:commons-io-2.6", "similarityId": null, "fixResolutionText": "2.11.0.redhat-00004", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-22", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-37533", "cveName": "CVE-2021-37533", "score": 6.5, "severity": "Medium", "publishDate": "2022-12-03T15:15:00", "references": ["https://github.com/advisories/GHSA-cgp8-4m63-fhh5", "https://github.com/apache/commons-net/commit/b0bff89f70cfea70009e22f87639816cc3993974"], "referencesData": [{"url": "https://github.com/advisories/GHSA-cgp8-4m63-fhh5", "type": "Advisory", "comment": ""}, {"url": "https://github.com/apache/commons-net/commit/b0bff89f70cfea70009e22f87639816cc3993974", "type": "Commit", "comment": ""}], "description": "Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about services running on the private network of the client. The default in version 3.9.0 is now false to ignore such hosts, as cURL does.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-commons-net:commons-net-3.6", "similarityId": null, "fixResolutionText": "3.9.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-20", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-0341", "cveName": "CVE-2021-0341", "score": 7.5, "severity": "High", "publishDate": "2021-02-10T17:15:22", "references": ["https://github.com/advisories/GHSA-3cqm-mf7h-prrj", "https://github.com/square/okhttp/issues/6724", "https://github.com/square/okhttp/pull/6741", "https://github.com/square/okhttp/commit/f574ea2f5259d9040f264ddeb582fb1ce563f10c", "https://square.github.io/okhttp/changelogs/changelog_4x/#version-492", "https://source.android.com/docs/security/bulletin/2021-02-01", "https://android.googlesource.com/platform/external/okhttp/+/72ac99d371b9794bd4947ae2794e3ef322e36673"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3cqm-mf7h-prrj", "type": "Advisory", "comment": ""}, {"url": "https://github.com/square/okhttp/issues/6724", "type": "Issue", "comment": ""}, {"url": "https://github.com/square/okhttp/pull/6741", "type": "Pull request", "comment": ""}, {"url": "https://github.com/square/okhttp/commit/f574ea2f5259d9040f264ddeb582fb1ce563f10c", "type": "Commit", "comment": "4.9.x"}, {"url": "https://square.github.io/okhttp/changelogs/changelog_4x/#version-492", "type": "Release Note", "comment": ""}, {"url": "https://source.android.com/docs/security/bulletin/2021-02-01", "type": "Advisory", "comment": ""}, {"url": "https://android.googlesource.com/platform/external/okhttp/+/72ac99d371b9794bd4947ae2794e3ef322e36673", "type": "Commit", "comment": ""}], "description": "In \"verifyHostName\" method of \"OkHostnameVerifier.java\", there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171980069. This issue affects all versions of \n the package com.squareup.okhttp:okhttp, and com.squareup.okhttp3:okhttp versions through 4.9.1, 4.10.0-Rc1, and 5.0.0-alpha.1 through 5.0.0-alpha.2.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "NONE", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.squareup.okhttp3:okhttp-3.11.0", "similarityId": null, "fixResolutionText": "4.9.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-295", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2023-0833", "cveName": "CVE-2023-0833", "score": 5.5, "severity": "Medium", "publishDate": "2023-09-27T15:16:00", "references": ["https://github.com/advisories/GHSA-8fhc-q55v-jvx2", "https://github.com/square/okhttp/issues/6738", "https://github.com/square/okhttp/pull/6740", "https://github.com/square/okhttp/commit/1fd7c0afdc2cee9ba982b07d49662af7f60e1518", "https://bugzilla.redhat.com/show_bug.cgi?id=2169845", "https://square.github.io/okhttp/changelogs/changelog_4x/#version-492"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8fhc-q55v-jvx2", "type": "Advisory", "comment": ""}, {"url": "https://github.com/square/okhttp/issues/6738", "type": "Issue", "comment": ""}, {"url": "https://github.com/square/okhttp/pull/6740", "type": "Pull request", "comment": ""}, {"url": "https://github.com/square/okhttp/commit/1fd7c0afdc2cee9ba982b07d49662af7f60e1518", "type": "Commit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2169845", "type": "Issue", "comment": ""}, {"url": "https://square.github.io/okhttp/changelogs/changelog_4x/#version-492", "type": "Release Note", "comment": ""}], "description": "A flaw was found in Red Hat's AMQ-Streams, which ships a version of the \"OKHttp\" component with an information disclosure flaw via an exception triggered by a header containing an illegal value. This issue could allow an authenticated attacker to access information outside of their regular permissions. This vulnerability affects com.squareup.okhttp3:okhttp package versions through 4.9.1, 4.10.0-RC1, and 5.0.0-alpha.1 through 5.0.0-alpha.2.", "cvss": {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-com.squareup.okhttp3:okhttp-3.11.0", "similarityId": null, "fixResolutionText": "4.9.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-209", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2023-3635", "cveName": "CVE-2023-3635", "score": 7.5, "severity": "High", "publishDate": "2023-07-12T19:15:00", "references": ["https://github.com/advisories/GHSA-w33c-445m-f8w7", "https://github.com/square/okio/pull/1280", "https://github.com/square/okio/commit/81bce1a30af244550b0324597720e4799281da7b", "https://research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195/", "https://github.com/square/okio/blob/parent-3.4.0/CHANGELOG.md#version-340"], "referencesData": [{"url": "https://github.com/advisories/GHSA-w33c-445m-f8w7", "type": "Advisory", "comment": ""}, {"url": "https://github.com/square/okio/pull/1280", "type": "Pull request", "comment": ""}, {"url": "https://github.com/square/okio/commit/81bce1a30af244550b0324597720e4799281da7b", "type": "Commit", "comment": ""}, {"url": "https://research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/square/okio/blob/parent-3.4.0/CHANGELOG.md#version-340", "type": "Release Note", "comment": ""}], "description": "GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to Denial Of Service of the Okio client when handling a crafted GZIP archive, by using the \"GzipSource\" class. This issue affects com.squareup.okio:okio versions prior to 3.4.0.\n\n", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.squareup.okio:okio-1.14.0", "similarityId": null, "fixResolutionText": "1.15.0.redhat-00004", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-681", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-23339", "cveName": "CVE-2021-23339", "score": 6.5, "severity": "Medium", "publishDate": "2021-02-17T08:15:00", "references": ["https://github.com/akka/akka-http/commit/e3a4935151c91cee28e65e6b894dd50839ef9d34", "https://doc.akka.io/docs/akka-http/current/security/2021-02-24-incorrect-handling-of-Transfer-Encoding-header.html", "https://github.com/akka/akka-http/pull/3754", "https://github.com/advisories/GHSA-2w7w-2j92-44hx"], "referencesData": [{"url": "https://github.com/akka/akka-http/commit/e3a4935151c91cee28e65e6b894dd50839ef9d34", "type": "Commit", "comment": ""}, {"url": "https://doc.akka.io/docs/akka-http/current/security/2021-02-24-incorrect-handling-of-Transfer-Encoding-header.html", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/akka/akka-http/pull/3754", "type": "Pull request", "comment": ""}, {"url": "https://github.com/advisories/GHSA-2w7w-2j92-44hx", "type": "Advisory", "comment": ""}], "description": "This affects all versions before 10.1.14 and from 10.2.0 to 10.2.3 of package com.typesafe.akka:akka-http-core. It allows multiple Transfer-Encoding headers", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.4, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "NONE", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-com.typesafe.akka:akka-http-core_2.13-10.1.8", "similarityId": null, "fixResolutionText": "10.5.3", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-444", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-42697", "cveName": "CVE-2021-42697", "score": 7.5, "severity": "High", "publishDate": "2021-11-02T22:15:00", "references": ["https://github.com/advisories/GHSA-3hw2-h67c-wq66", "https://doc.akka.io/docs/akka-http/current/security/2021-CVE-2021-42697-stack-overflow-parsing-user-agent.html", "https://akka.io/blog/news/2021/11/02/akka-http-10.2.7-released", "https://github.com/akka/akka-http/pull/3924", "https://github.com/akka/akka-http/issues/3918", "https://github.com/akka/akka-http/commit/6fd3c0dc2d9dc979bdc99395f39ec42e733011e4"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3hw2-h67c-wq66", "type": "Advisory", "comment": ""}, {"url": "https://doc.akka.io/docs/akka-http/current/security/2021-CVE-2021-42697-stack-overflow-parsing-user-agent.html", "type": "Advisory", "comment": ""}, {"url": "https://akka.io/blog/news/2021/11/02/akka-http-10.2.7-released", "type": "Release Note", "comment": ""}, {"url": "https://github.com/akka/akka-http/pull/3924", "type": "Pull request", "comment": ""}, {"url": "https://github.com/akka/akka-http/issues/3918", "type": "Issue", "comment": ""}, {"url": "https://github.com/akka/akka-http/commit/6fd3c0dc2d9dc979bdc99395f39ec42e733011e4", "type": "Commit", "comment": ""}], "description": "Akka HTTP before 10.1.15 and from 10.2.0 to 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote attacker to conduct a Denial of Service attack by sending a User-Agent header with deeply nested comments.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.typesafe.akka:akka-http-core_2.13-10.1.8", "similarityId": null, "fixResolutionText": "10.5.3", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-674", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2023-44487", "cveName": "CVE-2023-44487", "score": 7.5, "severity": "High", "publishDate": "2023-10-10T09:17:00", "references": ["https://github.com/advisories/GHSA-vx74-f528-fxqg", "https://github.com/advisories/GHSA-qppj-fm5r-hxr3", "https://github.com/advisories/GHSA-xpw8-rcwv-8f8p", "https://github.com/advisories/GHSA-9wmc-rg4h-28wv", "https://tomcat.apache.org/security-9.html", "https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61", "https://github.com/apple/swift-nio-http2/commit/3798fe5f1564f27461390b4f6163f6ddfb21fd2d", "https://github.com/apache/trafficserver/commit/83161881b172f51f4b2669cb47af24ddaf6c9cdc", "https://github.com/apache/tomcat/commit/9cdfe25bad707f34b3e5da2994f3f1952a163c3e", "https://github.com/nghttp2/nghttp2/commit/72b4af6143681f528f1d237b21a9a7aee1738832", "https://github.com/jetty/jetty.project/pull/10681", "https://github.com/jetty/jetty.project/commit/dbb94514dc9d3fb21fe92080f57c314e7e06a148", "https://github.com/line/armeria/pull/5232", "https://github.com/line/armeria/commit/4121cf5c8079da5a22bc33e78adb6b3b6218ef07", "https://github.com/akka/akka-http/pull/4324", "https://github.com/akka/akka-http/commit/1f29fe6a8567c57dfe848a21ae883304cce5646d", "https://netty.io/news/2023/10/10/4-1-100-Final.html", "https://github.com/akka/akka-http/issues/4323", "https://github.com/akka/akka-http/releases/tag/v10.6.0", "https://github.com/jetty/jetty.project/issues/10679", "https://github.com/apache/trafficserver/pull/10563", "https://github.com/grpc/grpc-go/commit/f2180b4d5403d2210b30b93098eb7da31c05c721", "https://github.com/grpc/grpc-go/pull/6703", "https://github.com/nghttp2/nghttp2/pull/1961", "https://github.com/facebook/proxygen/pull/466", "https://github.com/facebook/proxygen/commit/34a804d4b5a6a49357ac9d809ed546600e5e6be1", "https://github.com/alibaba/tengine/pull/1874", "https://github.com/alibaba/tengine/commit/9330174ba9ba2c1e186a9ffa10ae962ccb9280f1", "https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf", "https://github.com/h2o/h2o/pull/3291", "https://github.com/h2o/h2o/commit/28fe15117b909588bf14269a0e1c6ec4548579fe", "https://github.com/kubernetes/kubernetes/pull/121120", "https://github.com/kubernetes/kubernetes/commit/800a8eaba7f25bd223fefe6e7613e39a5d7f1eeb"], "referencesData": [{"url": "https://github.com/advisories/GHSA-vx74-f528-fxqg", "type": "Advisory", "comment": "nghttp2 "}, {"url": "https://github.com/advisories/GHSA-qppj-fm5r-hxr3", "type": "Advisory", "comment": "gRPC, swift-nio-http2, tomcat-embed-core, tomcat"}, {"url": "https://github.com/advisories/GHSA-xpw8-rcwv-8f8p", "type": "Advisory", "comment": "Netty"}, {"url": "https://github.com/advisories/GHSA-9wmc-rg4h-28wv", "type": "Advisory", "comment": "Kuma"}, {"url": "https://tomcat.apache.org/security-9.html", "type": "Advisory", "comment": "Tomcat"}, {"url": "https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61", "type": "Commit", "comment": "Netty"}, {"url": "https://github.com/apple/swift-nio-http2/commit/3798fe5f1564f27461390b4f6163f6ddfb21fd2d", "type": "Commit", "comment": "swift-nio-http2"}, {"url": "https://github.com/apache/trafficserver/commit/83161881b172f51f4b2669cb47af24ddaf6c9cdc", "type": "Commit", "comment": "Trafficserver"}, {"url": "https://github.com/apache/tomcat/commit/9cdfe25bad707f34b3e5da2994f3f1952a163c3e", "type": "Commit", "comment": "Tomcat"}, {"url": "https://github.com/nghttp2/nghttp2/commit/72b4af6143681f528f1d237b21a9a7aee1738832", "type": "Commit", "comment": "nghttp2"}, {"url": "https://github.com/jetty/jetty.project/pull/10681", "type": "Pull request", "comment": "Jetty"}, {"url": "https://github.com/jetty/jetty.project/commit/dbb94514dc9d3fb21fe92080f57c314e7e06a148", "type": "Commit", "comment": "Jetty"}, {"url": "https://github.com/line/armeria/pull/5232", "type": "Pull request", "comment": "Armeria"}, {"url": "https://github.com/line/armeria/commit/4121cf5c8079da5a22bc33e78adb6b3b6218ef07", "type": "Commit", "comment": "Armeria"}, {"url": "https://github.com/akka/akka-http/pull/4324", "type": "Pull request", "comment": "Akka-http"}, {"url": "https://github.com/akka/akka-http/commit/1f29fe6a8567c57dfe848a21ae883304cce5646d", "type": "Commit", "comment": "Akka-http"}, {"url": "https://netty.io/news/2023/10/10/4-1-100-Final.html", "type": "Release Note", "comment": "Netty"}, {"url": "https://github.com/akka/akka-http/issues/4323", "type": "Issue", "comment": "Akka-http"}, {"url": "https://github.com/akka/akka-http/releases/tag/v10.6.0", "type": "Release Note", "comment": "Akka-http"}, {"url": "https://github.com/jetty/jetty.project/issues/10679", "type": "Issue", "comment": "Jetty"}, {"url": "https://github.com/apache/trafficserver/pull/10563", "type": "Pull request", "comment": "Trafficserver"}, {"url": "https://github.com/grpc/grpc-go/commit/f2180b4d5403d2210b30b93098eb7da31c05c721", "type": "Commit", "comment": "gRPC"}, {"url": "https://github.com/grpc/grpc-go/pull/6703", "type": "Pull request", "comment": "gRPC"}, {"url": "https://github.com/nghttp2/nghttp2/pull/1961", "type": "Pull request", "comment": "nghttp2"}, {"url": "https://github.com/facebook/proxygen/pull/466", "type": "Pull request", "comment": "facebook/proxygen"}, {"url": "https://github.com/facebook/proxygen/commit/34a804d4b5a6a49357ac9d809ed546600e5e6be1", "type": "Commit", "comment": "facebook/proxygen"}, {"url": "https://github.com/alibaba/tengine/pull/1874", "type": "Pull request", "comment": "alibaba/tengine"}, {"url": "https://github.com/alibaba/tengine/commit/9330174ba9ba2c1e186a9ffa10ae962ccb9280f1", "type": "Commit", "comment": "alibaba/tengine"}, {"url": "https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf", "type": "Advisory", "comment": "h2o"}, {"url": "https://github.com/h2o/h2o/pull/3291", "type": "Pull request", "comment": "h2o"}, {"url": "https://github.com/h2o/h2o/commit/28fe15117b909588bf14269a0e1c6ec4548579fe", "type": "Commit", "comment": "h2o"}, {"url": "https://github.com/kubernetes/kubernetes/pull/121120", "type": "Pull request", "comment": "Kubernetes"}, {"url": "https://github.com/kubernetes/kubernetes/commit/800a8eaba7f25bd223fefe6e7613e39a5d7f1eeb", "type": "Commit", "comment": "Kubernetes"}], "description": "The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.typesafe.akka:akka-http-core_2.13-10.1.8", "similarityId": null, "fixResolutionText": "10.5.3", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-12480", "cveName": "CVE-2020-12480", "score": 6.5, "severity": "Medium", "publishDate": "2020-08-17T21:15:00", "references": ["https://www.playframework.com/security/vulnerability/CVE-2020-12480-CsrfBlacklistBypass", "https://github.com/advisories/GHSA-cf8j-64h9-6q58", "https://github.com/playframework/playframework/pull/10285", "https://github.com/playframework/playframework/commit/c82de44fc50b7c58c6e0580f1f67ff08aa7bd154"], "referencesData": [{"url": "https://www.playframework.com/security/vulnerability/CVE-2020-12480-CsrfBlacklistBypass", "type": "Advisory", "comment": ""}, {"url": "https://github.com/advisories/GHSA-cf8j-64h9-6q58", "type": "Advisory", "comment": ""}, {"url": "https://github.com/playframework/playframework/pull/10285", "type": "Pull request", "comment": ""}, {"url": "https://github.com/playframework/playframework/commit/c82de44fc50b7c58c6e0580f1f67ff08aa7bd154", "type": "Commit", "comment": ""}], "description": "In Play Framework before 2.7.5 and 2.8.x through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be parsed.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.3, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-com.typesafe.play:filters-helpers_2.13-2.7.3", "similarityId": null, "fixResolutionText": "2.7.5", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-352", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-31023", "cveName": "CVE-2022-31023", "score": 7.5, "severity": "High", "publishDate": "2022-06-02T06:05:00", "references": ["https://github.com/advisories/GHSA-p9p4-97g9-wcrh", "https://github.com/playframework/playframework/pull/11305", "https://github.com/playframework/playframework/commit/710885e44c3b58394b02cc91e1f0226737bb2535", "https://github.com/playframework/playframework/releases/tag/2.8.16"], "referencesData": [{"url": "https://github.com/advisories/GHSA-p9p4-97g9-wcrh", "type": "Advisory", "comment": ""}, {"url": "https://github.com/playframework/playframework/pull/11305", "type": "Pull request", "comment": ""}, {"url": "https://github.com/playframework/playframework/commit/710885e44c3b58394b02cc91e1f0226737bb2535", "type": "Commit", "comment": ""}, {"url": "https://github.com/playframework/playframework/releases/tag/2.8.16", "type": "Release Note", "comment": ""}], "description": "Play Framework is a web framework for Java and Scala. Verions prior to 2.8.16 are vulnerable to generation of error messages containing sensitive information. Play Framework, when run in dev mode, shows verbose errors for easy debugging, including an exception stack trace. Play does this by configuring its `DefaultHttpErrorHandler` to do so based on the application mode. In its Scala API Play also provides a static object `DefaultHttpErrorHandler` that is configured to always show verbose errors. This is used as a default value in some Play APIs, so it is possible to inadvertently use this version in production. It is also possible to improperly configure the `DefaultHttpErrorHandler` object instance as the injected error handler. Both of these situations could result in verbose errors displaying to users in a production application, which could expose sensitive information from the application. In particular, the constructor for `CORSFilter` and `apply` method for `CORSActionBuilder` use the static object `DefaultHttpErrorHandler` as a default value. This is patched in Play Framework 2.8.16. The `DefaultHttpErrorHandler` object has been changed to use the prod-mode behavior, and `DevHttpErrorHandler` has been introduced for the dev-mode behavior. A workaround is available. When constructing a `CORSFilter` or `CORSActionBuilder`, ensure that a properly-configured error handler is passed. Generally this should be done by using the `HttpErrorHandler` instance provided through dependency injection or through Play's `BuiltInComponents`. Ensure that the application is not using the `DefaultHttpErrorHandler` static object in any code that may be run in production.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.typesafe.play:play_2.13-2.7.3", "similarityId": null, "fixResolutionText": "2.8.16", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-209", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-27196", "cveName": "CVE-2020-27196", "score": 7.5, "severity": "High", "publishDate": "2020-11-06T14:15:00", "references": ["https://github.com/advisories/GHSA-h48w-c35p-6m8x", "https://www.playframework.com/security/vulnerability/CVE-2020-27196-DosViaJsonStackOverflow", "https://github.com/playframework/playframework/pull/10499", "https://github.com/playframework/playframework/commit/d98536effc85e684ec9a91d5db8c8710bb2034dc"], "referencesData": [{"url": "https://github.com/advisories/GHSA-h48w-c35p-6m8x", "type": "Advisory", "comment": ""}, {"url": "https://www.playframework.com/security/vulnerability/CVE-2020-27196-DosViaJsonStackOverflow", "type": "Advisory", "comment": ""}, {"url": "https://github.com/playframework/playframework/pull/10499", "type": "Pull request", "comment": ""}, {"url": "https://github.com/playframework/playframework/commit/d98536effc85e684ec9a91d5db8c8710bb2034dc", "type": "Commit", "comment": ""}], "description": "An issue was discovered in PlayJava in Play Framework 2.6.x, 2.7.x before 2.7.6 and 2.8.x before 2.8.3. The body parsing of HTTP requests eagerly parses a payload given a Content-Type header. A deep JSON structure sent to a valid POST endpoint (that may or may not expect JSON payloads) causes a StackOverflowError and Denial of Service.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.typesafe.play:play_2.13-2.7.3", "similarityId": null, "fixResolutionText": "2.8.16", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-26883", "cveName": "CVE-2020-26883", "score": 7.5, "severity": "High", "publishDate": "2020-11-06T14:15:00", "references": ["https://github.com/advisories/GHSA-p8p6-rcp6-4mrm", "https://www.playframework.com/security/vulnerability/CVE-2020-26883-JsonParseUncontrolledRecursion", "https://github.com/playframework/playframework/pull/10499", "https://github.com/playframework/playframework/commit/d98536effc85e684ec9a91d5db8c8710bb2034dc"], "referencesData": [{"url": "https://github.com/advisories/GHSA-p8p6-rcp6-4mrm", "type": "Advisory", "comment": ""}, {"url": "https://www.playframework.com/security/vulnerability/CVE-2020-26883-JsonParseUncontrolledRecursion", "type": "Advisory", "comment": ""}, {"url": "https://github.com/playframework/playframework/pull/10499", "type": "Pull request", "comment": ""}, {"url": "https://github.com/playframework/playframework/commit/d98536effc85e684ec9a91d5db8c8710bb2034dc", "type": "Commit", "comment": ""}], "description": "In Play Framework 2.6.x, 2.7.x before 2.7.6 and 2.8.x before 2.8.3, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.typesafe.play:play_2.13-2.7.3", "similarityId": null, "fixResolutionText": "2.8.16", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-674", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-26882", "cveName": "CVE-2020-26882", "score": 7.5, "severity": "High", "publishDate": "2020-11-06T14:15:00", "references": ["https://github.com/advisories/GHSA-r8rm-4hfj-2x87", "https://www.playframework.com/security/vulnerability/CVE-2020-26882-JsonParseDataAmplification", "https://github.com/playframework/playframework/pull/10499", "https://github.com/playframework/playframework/commit/d98536effc85e684ec9a91d5db8c8710bb2034dc"], "referencesData": [{"url": "https://github.com/advisories/GHSA-r8rm-4hfj-2x87", "type": "Advisory", "comment": ""}, {"url": "https://www.playframework.com/security/vulnerability/CVE-2020-26882-JsonParseDataAmplification", "type": "Advisory", "comment": ""}, {"url": "https://github.com/playframework/playframework/pull/10499", "type": "Pull request", "comment": ""}, {"url": "https://github.com/playframework/playframework/commit/d98536effc85e684ec9a91d5db8c8710bb2034dc", "type": "Commit", "comment": ""}], "description": "In Play Framework 2.6.x, 2.7.x before 2.7.6 and 2.8.x before 2.8.3, data amplification can occur when an application accepts multipart/form-data JSON input.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.typesafe.play:play_2.13-2.7.3", "similarityId": null, "fixResolutionText": "2.8.16", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-674", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-31023", "cveName": "CVE-2022-31023", "score": 7.5, "severity": "High", "publishDate": "2022-06-02T06:05:00", "references": ["https://github.com/advisories/GHSA-p9p4-97g9-wcrh", "https://github.com/playframework/playframework/pull/11305", "https://github.com/playframework/playframework/commit/710885e44c3b58394b02cc91e1f0226737bb2535", "https://github.com/playframework/playframework/releases/tag/2.8.16"], "referencesData": [{"url": "https://github.com/advisories/GHSA-p9p4-97g9-wcrh", "type": "Advisory", "comment": ""}, {"url": "https://github.com/playframework/playframework/pull/11305", "type": "Pull request", "comment": ""}, {"url": "https://github.com/playframework/playframework/commit/710885e44c3b58394b02cc91e1f0226737bb2535", "type": "Commit", "comment": ""}, {"url": "https://github.com/playframework/playframework/releases/tag/2.8.16", "type": "Release Note", "comment": ""}], "description": "Play Framework is a web framework for Java and Scala. Verions prior to 2.8.16 are vulnerable to generation of error messages containing sensitive information. Play Framework, when run in dev mode, shows verbose errors for easy debugging, including an exception stack trace. Play does this by configuring its `DefaultHttpErrorHandler` to do so based on the application mode. In its Scala API Play also provides a static object `DefaultHttpErrorHandler` that is configured to always show verbose errors. This is used as a default value in some Play APIs, so it is possible to inadvertently use this version in production. It is also possible to improperly configure the `DefaultHttpErrorHandler` object instance as the injected error handler. Both of these situations could result in verbose errors displaying to users in a production application, which could expose sensitive information from the application. In particular, the constructor for `CORSFilter` and `apply` method for `CORSActionBuilder` use the static object `DefaultHttpErrorHandler` as a default value. This is patched in Play Framework 2.8.16. The `DefaultHttpErrorHandler` object has been changed to use the prod-mode behavior, and `DevHttpErrorHandler` has been introduced for the dev-mode behavior. A workaround is available. When constructing a `CORSFilter` or `CORSActionBuilder`, ensure that a properly-configured error handler is passed. Generally this should be done by using the `HttpErrorHandler` instance provided through dependency injection or through Play's `BuiltInComponents`. Ensure that the application is not using the `DefaultHttpErrorHandler` static object in any code that may be run in production.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.typesafe.play:play-akka-http-server_2.13-2.7.3", "similarityId": null, "fixResolutionText": "2.8.16", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-209", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-27196", "cveName": "CVE-2020-27196", "score": 7.5, "severity": "High", "publishDate": "2020-11-06T14:15:00", "references": ["https://github.com/advisories/GHSA-h48w-c35p-6m8x", "https://www.playframework.com/security/vulnerability/CVE-2020-27196-DosViaJsonStackOverflow", "https://github.com/playframework/playframework/pull/10499", "https://github.com/playframework/playframework/commit/d98536effc85e684ec9a91d5db8c8710bb2034dc"], "referencesData": [{"url": "https://github.com/advisories/GHSA-h48w-c35p-6m8x", "type": "Advisory", "comment": ""}, {"url": "https://www.playframework.com/security/vulnerability/CVE-2020-27196-DosViaJsonStackOverflow", "type": "Advisory", "comment": ""}, {"url": "https://github.com/playframework/playframework/pull/10499", "type": "Pull request", "comment": ""}, {"url": "https://github.com/playframework/playframework/commit/d98536effc85e684ec9a91d5db8c8710bb2034dc", "type": "Commit", "comment": ""}], "description": "An issue was discovered in PlayJava in Play Framework 2.6.x, 2.7.x before 2.7.6 and 2.8.x before 2.8.3. The body parsing of HTTP requests eagerly parses a payload given a Content-Type header. A deep JSON structure sent to a valid POST endpoint (that may or may not expect JSON payloads) causes a StackOverflowError and Denial of Service.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.typesafe.play:play-java_2.13-2.7.3", "similarityId": null, "fixResolutionText": "2.7.6", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-26882", "cveName": "CVE-2020-26882", "score": 7.5, "severity": "High", "publishDate": "2020-11-06T14:15:00", "references": ["https://github.com/advisories/GHSA-r8rm-4hfj-2x87", "https://www.playframework.com/security/vulnerability/CVE-2020-26882-JsonParseDataAmplification", "https://github.com/playframework/playframework/pull/10499", "https://github.com/playframework/playframework/commit/d98536effc85e684ec9a91d5db8c8710bb2034dc"], "referencesData": [{"url": "https://github.com/advisories/GHSA-r8rm-4hfj-2x87", "type": "Advisory", "comment": ""}, {"url": "https://www.playframework.com/security/vulnerability/CVE-2020-26882-JsonParseDataAmplification", "type": "Advisory", "comment": ""}, {"url": "https://github.com/playframework/playframework/pull/10499", "type": "Pull request", "comment": ""}, {"url": "https://github.com/playframework/playframework/commit/d98536effc85e684ec9a91d5db8c8710bb2034dc", "type": "Commit", "comment": ""}], "description": "In Play Framework 2.6.x, 2.7.x before 2.7.6 and 2.8.x before 2.8.3, data amplification can occur when an application accepts multipart/form-data JSON input.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.typesafe.play:play-java_2.13-2.7.3", "similarityId": null, "fixResolutionText": "2.7.6", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-674", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-26883", "cveName": "CVE-2020-26883", "score": 7.5, "severity": "High", "publishDate": "2020-11-06T14:15:00", "references": ["https://github.com/advisories/GHSA-p8p6-rcp6-4mrm", "https://www.playframework.com/security/vulnerability/CVE-2020-26883-JsonParseUncontrolledRecursion", "https://github.com/playframework/playframework/pull/10499", "https://github.com/playframework/playframework/commit/d98536effc85e684ec9a91d5db8c8710bb2034dc"], "referencesData": [{"url": "https://github.com/advisories/GHSA-p8p6-rcp6-4mrm", "type": "Advisory", "comment": ""}, {"url": "https://www.playframework.com/security/vulnerability/CVE-2020-26883-JsonParseUncontrolledRecursion", "type": "Advisory", "comment": ""}, {"url": "https://github.com/playframework/playframework/pull/10499", "type": "Pull request", "comment": ""}, {"url": "https://github.com/playframework/playframework/commit/d98536effc85e684ec9a91d5db8c8710bb2034dc", "type": "Commit", "comment": ""}], "description": "In Play Framework 2.6.x, 2.7.x before 2.7.6 and 2.8.x before 2.8.3, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.typesafe.play:play-java_2.13-2.7.3", "similarityId": null, "fixResolutionText": "2.7.6", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-674", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-31023", "cveName": "CVE-2022-31023", "score": 7.5, "severity": "High", "publishDate": "2022-06-02T06:05:00", "references": ["https://github.com/advisories/GHSA-p9p4-97g9-wcrh", "https://github.com/playframework/playframework/pull/11305", "https://github.com/playframework/playframework/commit/710885e44c3b58394b02cc91e1f0226737bb2535", "https://github.com/playframework/playframework/releases/tag/2.8.16"], "referencesData": [{"url": "https://github.com/advisories/GHSA-p9p4-97g9-wcrh", "type": "Advisory", "comment": ""}, {"url": "https://github.com/playframework/playframework/pull/11305", "type": "Pull request", "comment": ""}, {"url": "https://github.com/playframework/playframework/commit/710885e44c3b58394b02cc91e1f0226737bb2535", "type": "Commit", "comment": ""}, {"url": "https://github.com/playframework/playframework/releases/tag/2.8.16", "type": "Release Note", "comment": ""}], "description": "Play Framework is a web framework for Java and Scala. Verions prior to 2.8.16 are vulnerable to generation of error messages containing sensitive information. Play Framework, when run in dev mode, shows verbose errors for easy debugging, including an exception stack trace. Play does this by configuring its `DefaultHttpErrorHandler` to do so based on the application mode. In its Scala API Play also provides a static object `DefaultHttpErrorHandler` that is configured to always show verbose errors. This is used as a default value in some Play APIs, so it is possible to inadvertently use this version in production. It is also possible to improperly configure the `DefaultHttpErrorHandler` object instance as the injected error handler. Both of these situations could result in verbose errors displaying to users in a production application, which could expose sensitive information from the application. In particular, the constructor for `CORSFilter` and `apply` method for `CORSActionBuilder` use the static object `DefaultHttpErrorHandler` as a default value. This is patched in Play Framework 2.8.16. The `DefaultHttpErrorHandler` object has been changed to use the prod-mode behavior, and `DevHttpErrorHandler` has been introduced for the dev-mode behavior. A workaround is available. When constructing a `CORSFilter` or `CORSActionBuilder`, ensure that a properly-configured error handler is passed. Generally this should be done by using the `HttpErrorHandler` instance provided through dependency injection or through Play's `BuiltInComponents`. Ensure that the application is not using the `DefaultHttpErrorHandler` static object in any code that may be run in production.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.typesafe.play:play-netty-server_2.13-2.7.3", "similarityId": null, "fixResolutionText": "2.8.16", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-209", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-31023", "cveName": "CVE-2022-31023", "score": 7.5, "severity": "High", "publishDate": "2022-06-02T06:05:00", "references": ["https://github.com/advisories/GHSA-p9p4-97g9-wcrh", "https://github.com/playframework/playframework/pull/11305", "https://github.com/playframework/playframework/commit/710885e44c3b58394b02cc91e1f0226737bb2535", "https://github.com/playframework/playframework/releases/tag/2.8.16"], "referencesData": [{"url": "https://github.com/advisories/GHSA-p9p4-97g9-wcrh", "type": "Advisory", "comment": ""}, {"url": "https://github.com/playframework/playframework/pull/11305", "type": "Pull request", "comment": ""}, {"url": "https://github.com/playframework/playframework/commit/710885e44c3b58394b02cc91e1f0226737bb2535", "type": "Commit", "comment": ""}, {"url": "https://github.com/playframework/playframework/releases/tag/2.8.16", "type": "Release Note", "comment": ""}], "description": "Play Framework is a web framework for Java and Scala. Verions prior to 2.8.16 are vulnerable to generation of error messages containing sensitive information. Play Framework, when run in dev mode, shows verbose errors for easy debugging, including an exception stack trace. Play does this by configuring its `DefaultHttpErrorHandler` to do so based on the application mode. In its Scala API Play also provides a static object `DefaultHttpErrorHandler` that is configured to always show verbose errors. This is used as a default value in some Play APIs, so it is possible to inadvertently use this version in production. It is also possible to improperly configure the `DefaultHttpErrorHandler` object instance as the injected error handler. Both of these situations could result in verbose errors displaying to users in a production application, which could expose sensitive information from the application. In particular, the constructor for `CORSFilter` and `apply` method for `CORSActionBuilder` use the static object `DefaultHttpErrorHandler` as a default value. This is patched in Play Framework 2.8.16. The `DefaultHttpErrorHandler` object has been changed to use the prod-mode behavior, and `DevHttpErrorHandler` has been introduced for the dev-mode behavior. A workaround is available. When constructing a `CORSFilter` or `CORSActionBuilder`, ensure that a properly-configured error handler is passed. Generally this should be done by using the `HttpErrorHandler` instance provided through dependency injection or through Play's `BuiltInComponents`. Ensure that the application is not using the `DefaultHttpErrorHandler` static object in any code that may be run in production.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-com.typesafe.play:play-server_2.13-2.7.3", "similarityId": null, "fixResolutionText": "2.8.16", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-209", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-37136", "cveName": "CVE-2021-37136", "score": 7.5, "severity": "High", "publishDate": "2021-10-18T21:05:00", "references": ["https://github.com/advisories/GHSA-grg4-wf29-r9vv", "https://netty.io/news/2021/09/09/4-1-68-Final.html", "https://github.com/netty/netty/commit/41d3d61a61608f2223bb364955ab2045dd5e4020"], "referencesData": [{"url": "https://github.com/advisories/GHSA-grg4-wf29-r9vv", "type": "Advisory", "comment": ""}, {"url": "https://netty.io/news/2021/09/09/4-1-68-Final.html", "type": "Release Note", "comment": ""}, {"url": "https://github.com/netty/netty/commit/41d3d61a61608f2223bb364955ab2045dd5e4020", "type": "Commit", "comment": ""}], "description": "The Bzip2 decompression decoder function in 'netty-codec' package before 4.1.68.Final doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-io.netty:netty-codec-4.1.34.Final", "similarityId": null, "fixResolutionText": "4.1.68.Final", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-11612", "cveName": "CVE-2020-11612", "score": 7.5, "severity": "High", "publishDate": "2020-04-07T18:15:00", "references": ["https://github.com/advisories/GHSA-mm9x-g8pc-w292", "https://github.com/netty/netty/issues/6168", "https://github.com/netty/netty/pull/9924", "https://github.com/netty/netty/commit/1543218d3e7afcb33a90b728b14370395a3deca0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-mm9x-g8pc-w292", "type": "Advisory", "comment": ""}, {"url": "https://github.com/netty/netty/issues/6168", "type": "Issue", "comment": ""}, {"url": "https://github.com/netty/netty/pull/9924", "type": "Pull request", "comment": ""}, {"url": "https://github.com/netty/netty/commit/1543218d3e7afcb33a90b728b14370395a3deca0", "type": "Commit", "comment": ""}], "description": "The ZlibDecoders in Netty before 4.1.46 and 5.x up to 5.0.0.Alpha2 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "High", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-io.netty:netty-codec-4.1.34.Final", "similarityId": null, "fixResolutionText": "4.1.68.Final", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-37137", "cveName": "CVE-2021-37137", "score": 7.5, "severity": "High", "publishDate": "2021-10-19T07:49:00", "references": ["https://github.com/advisories/GHSA-9vjp-v76f-g363", "https://github.com/netty/netty/commit/6da4956b31023ae967451e1d94ff51a746a9194f", "https://netty.io/news/2021/09/09/4-1-68-Final.html"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9vjp-v76f-g363", "type": "Advisory", "comment": ""}, {"url": "https://github.com/netty/netty/commit/6da4956b31023ae967451e1d94ff51a746a9194f", "type": "Commit", "comment": ""}, {"url": "https://netty.io/news/2021/09/09/4-1-68-Final.html", "type": "Release Note", "comment": ""}], "description": "The Snappy frame decoder function in 'netty-codec' package before 4.1.68.Final doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-io.netty:netty-codec-4.1.34.Final", "similarityId": null, "fixResolutionText": "4.1.68.Final", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-43797", "cveName": "CVE-2021-43797", "score": 6.5, "severity": "Medium", "publishDate": "2021-12-09T19:15:07", "references": ["https://github.com/advisories/GHSA-wx5j-54mm-rqqq", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2021-43797", "https://github.com/netty/netty/commit/07aa6b5938a8b6ed7a6586e066400e2643897323"], "referencesData": [{"url": "https://github.com/advisories/GHSA-wx5j-54mm-rqqq", "type": "Advisory", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2021-43797", "type": "Issue", "comment": ""}, {"url": "https://github.com/netty/netty/commit/07aa6b5938a8b6ed7a6586e066400e2643897323", "type": "Commit", "comment": ""}], "description": "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. Netty versions prior to version 4.1.71.Final, 5.0.0.Alpha1 and 5.0.0.Alpha2 skips control chars when they are present at the beginning / end of the header name. It should instead fail fast as these are not allowed by the spec and could lead to HTTP request smuggling. Failing to do the validation might cause netty to \"sanitize\" header names before it forward these to another remote system when used as proxy. This remote system can't see the invalid usage anymore, and therefore does not do the validation itself.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.3, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-io.netty:netty-codec-http-4.1.34.Final", "similarityId": null, "fixResolutionText": "4.1.97.Final-redhat-00004", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-444", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-16869", "cveName": "CVE-2019-16869", "score": 7.5, "severity": "High", "publishDate": "2019-09-26T16:15:11", "references": ["https://github.com/advisories/GHSA-p979-4mfw-53vg", "https://seclists.org/bugtraq/2020/Jan/6", "https://github.com/netty/netty/issues/9571", "https://github.com/netty/netty/pull/9585", "https://github.com/netty/netty/commit/39cafcb05c99f2aa9fce7e6597664c9ed6a63a95", "https://netty.io/news/2019/09/25/4-1-42-Final.html"], "referencesData": [{"url": "https://github.com/advisories/GHSA-p979-4mfw-53vg", "type": "Advisory", "comment": ""}, {"url": "https://seclists.org/bugtraq/2020/Jan/6", "type": "Advisory", "comment": ""}, {"url": "https://github.com/netty/netty/issues/9571", "type": "Issue", "comment": ""}, {"url": "https://github.com/netty/netty/pull/9585", "type": "Pull request", "comment": ""}, {"url": "https://github.com/netty/netty/commit/39cafcb05c99f2aa9fce7e6597664c9ed6a63a95", "type": "Commit", "comment": ""}, {"url": "https://netty.io/news/2019/09/25/4-1-42-Final.html", "type": "Release Note", "comment": ""}], "description": "Netty versions through 4.1.41.Final and 5.0.0-Alpha1 through 5.0.0-Alpha2 mishandles whitespace before the colon in HTTP headers (such as a \"Transfer-Encoding : chunked\" line), which leads to HTTP request smuggling.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-io.netty:netty-codec-http-4.1.34.Final", "similarityId": null, "fixResolutionText": "4.1.97.Final-redhat-00004", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-444", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-20444", "cveName": "CVE-2019-20444", "score": 9.1, "severity": "Critical", "publishDate": "2020-01-29T21:15:00", "references": ["https://github.com/netty/netty/issues/9866", "https://github.com/netty/netty/pull/9871", "https://github.com/netty/netty/commit/a7c18d44b46e02dadfe3da225a06e5091f5f328e", "https://github.com/advisories/GHSA-cqqj-4p63-rrmm"], "referencesData": [{"url": "https://github.com/netty/netty/issues/9866", "type": "Issue", "comment": ""}, {"url": "https://github.com/netty/netty/pull/9871", "type": "Pull request", "comment": ""}, {"url": "https://github.com/netty/netty/commit/a7c18d44b46e02dadfe3da225a06e5091f5f328e", "type": "Commit", "comment": ""}, {"url": "https://github.com/advisories/GHSA-cqqj-4p63-rrmm", "type": "Advisory", "comment": ""}], "description": "HttpObjectDecoder.java in Netty packages io.netty:netty-all and io.netty:netty-codec-http versions before 4.1.44 and 5.x up to 5.0.0.Alpha2 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an \"invalid fold.\"", "cvss": {"score": 9.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 6.4, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "NONE", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 9.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Maven-io.netty:netty-codec-http-4.1.34.Final", "similarityId": null, "fixResolutionText": "4.1.97.Final-redhat-00004", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-444", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-20445", "cveName": "CVE-2019-20445", "score": 9.1, "severity": "Critical", "publishDate": "2020-01-29T21:15:11", "references": ["https://github.com/netty/netty/issues/9861", "https://github.com/netty/netty/pull/9865", "https://github.com/netty/netty/commit/8494b046ec7e4f28dbd44bc699cc4c4c92251729", "https://github.com/advisories/GHSA-p2v9-g2qv-p635", "https://github.com/netty/netty/commit/629034624626b722128e0fcc6b3ec9d406cb3706", "https://github.com/netty/netty/pull/10003", "https://netty.io/news/2019/12/18/4-1-44-Final.html"], "referencesData": [{"url": "https://github.com/netty/netty/issues/9861", "type": "Issue", "comment": ""}, {"url": "https://github.com/netty/netty/pull/9865", "type": "Pull request", "comment": ""}, {"url": "https://github.com/netty/netty/commit/8494b046ec7e4f28dbd44bc699cc4c4c92251729", "type": "Commit", "comment": "initial fix"}, {"url": "https://github.com/advisories/GHSA-p2v9-g2qv-p635", "type": "Advisory", "comment": ""}, {"url": "https://github.com/netty/netty/commit/629034624626b722128e0fcc6b3ec9d406cb3706", "type": "Commit", "comment": "Additional fix"}, {"url": "https://github.com/netty/netty/pull/10003", "type": "Pull request", "comment": ""}, {"url": "https://netty.io/news/2019/12/18/4-1-44-Final.html", "type": "Release Note", "comment": ""}], "description": "A vulnerability exists in the file \"HttpObjectDecoder.java\" in Netty versions through 4.1.43.Final, 5.0.0.Alpha1, and 5.0.0.Alpha2, that allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.\n ", "cvss": {"score": 9.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 6.4, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "NONE", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 9.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Maven-io.netty:netty-codec-http-4.1.34.Final", "similarityId": null, "fixResolutionText": "4.1.97.Final-redhat-00004", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-444", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-7238", "cveName": "CVE-2020-7238", "score": 7.5, "severity": "High", "publishDate": "2020-01-27T17:15:00", "references": ["https://github.com/jdordonezn/CVE-2020-72381/issues/1", "https://github.com/netty/netty/issues/9861", "https://github.com/netty/netty/pull/9865", "https://github.com/netty/netty/commit/8494b046ec7e4f28dbd44bc699cc4c4c92251729", "https://netty.io/news/2019/12/18/4-1-44-Final.html"], "referencesData": [{"url": "https://github.com/jdordonezn/CVE-2020-72381/issues/1", "type": "POC/Exploit", "comment": ""}, {"url": "https://github.com/netty/netty/issues/9861", "type": "Issue", "comment": ""}, {"url": "https://github.com/netty/netty/pull/9865", "type": "Pull request", "comment": ""}, {"url": "https://github.com/netty/netty/commit/8494b046ec7e4f28dbd44bc699cc4c4c92251729", "type": "Commit", "comment": ""}, {"url": "https://netty.io/news/2019/12/18/4-1-44-Final.html", "type": "Release Note", "comment": ""}], "description": "Netty before 4.1.44.Final, 5.0.0.Alpha1 and 5.0.0.Alpha2 allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-io.netty:netty-codec-http-4.1.34.Final", "similarityId": null, "fixResolutionText": "4.1.97.Final-redhat-00004", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-444", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-21290", "cveName": "CVE-2021-21290", "score": 5.5, "severity": "Medium", "publishDate": "2021-02-08T20:15:00", "references": ["https://github.com/advisories/GHSA-5mcr-gq6c-3hq2", "https://github.com/netty/netty/commit/c735357bf29d07856ad171c6611a2e1a0e0000ec", "https://github.com/netty/netty/blob/e5951d46fc89db507ba7d2968d2ede26378f0b04/codec-http/src/main/java/io/netty/handler/codec/http/multipart/AbstractDiskHttpData.java#L80-L101"], "referencesData": [{"url": "https://github.com/advisories/GHSA-5mcr-gq6c-3hq2", "type": "Advisory", "comment": ""}, {"url": "https://github.com/netty/netty/commit/c735357bf29d07856ad171c6611a2e1a0e0000ec", "type": "Commit", "comment": ""}, {"url": "https://github.com/netty/netty/blob/e5951d46fc89db507ba7d2968d2ede26378f0b04/codec-http/src/main/java/io/netty/handler/codec/http/multipart/AbstractDiskHttpData.java#L80-L101", "type": "Other", "comment": "Vulnerable code"}], "description": "Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final and 5.x.Alpha there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method \"File.createTempFile\" on unix-like systems creates a random file, but, by default will create this file with the permissions \"-rw-r--r--\". Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty's \"AbstractDiskHttpData\" is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own \"java.io.tmpdir\" when you start the JVM or use \"DefaultHttpDataFactory.setBaseDir(...)\" to set the directory to something that is only readable by the current user.", "cvss": {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 1.9, "attackVector": "LOCAL", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "NONE", "exploitCodeMaturity": "3.4", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-io.netty:netty-codec-http-4.1.34.Final", "similarityId": null, "fixResolutionText": "4.1.97.Final-redhat-00004", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-378", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-21295", "cveName": "CVE-2021-21295", "score": 5.9, "severity": "Medium", "publishDate": "2021-03-09T19:15:00", "references": ["https://github.com/advisories/GHSA-wm47-8v5p-wjpj", "https://github.com/netty/netty/commit/89c241e3b1795ff257af4ad6eadc616cb2fb3dc4"], "referencesData": [{"url": "https://github.com/advisories/GHSA-wm47-8v5p-wjpj", "type": "Advisory", "comment": ""}, {"url": "https://github.com/netty/netty/commit/89c241e3b1795ff257af4ad6eadc616cb2fb3dc4", "type": "Commit", "comment": ""}], "description": "Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.60.Final and 5.0.0.AlphaX there is a vulnerability that enables request smuggling. If a Content-Length header is present in the original HTTP/2 request, the field is not validated by `Http2MultiplexHandler` as it is propagated up. This is fine as long as the request is not proxied through as HTTP/1.1. If the request comes in as an HTTP/2 stream, gets converted into the HTTP/1.1 domain objects (`HttpRequest`, `HttpContent`, etc.) via `Http2StreamFrameToHttpObjectCodec `and then sent up to the child channel's pipeline and proxied through a remote peer as HTTP/1.1 this may result in request smuggling. In a proxy case, users may assume the content-length is validated somehow, which is not the case. If the request is forwarded to a backend channel that is a HTTP/1.1 connection, the Content-Length now has meaning and needs to be checked. An attacker can smuggle requests inside the body as it gets downgraded from HTTP/2 to HTTP/1.1. For an example attack refer to the linked GitHub Advisory. Users are only affected if all of this is true: `HTTP2MultiplexCodec` or `Http2FrameCodec` is used, `Http2StreamFrameToHttpObjectCodec` is used to convert to HTTP/1.1 objects, and these HTTP/1.1 objects are forwarded to another remote peer. This has been patched in 4.1.60.Final As a workaround, the user can do the validation by themselves by implementing a custom `ChannelInboundHandler` that is put in the `ChannelPipeline` behind `Http2StreamFrameToHttpObjectCodec`.", "cvss": {"score": 5.9, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.9, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-io.netty:netty-codec-http-4.1.34.Final", "similarityId": null, "fixResolutionText": "4.1.97.Final-redhat-00004", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-444", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2024-29025", "cveName": "CVE-2024-29025", "score": 5.3, "severity": "Medium", "publishDate": "2024-03-25T20:15:08", "references": ["https://github.com/advisories/GHSA-5jpm-x58v-624v", "https://github.com/netty/netty/commit/0d0c6ed782d13d423586ad0c71737b2c7d02058c"], "referencesData": [{"url": "https://github.com/advisories/GHSA-5jpm-x58v-624v", "type": "Advisory", "comment": ""}, {"url": "https://github.com/netty/netty/commit/0d0c6ed782d13d423586ad0c71737b2c7d02058c", "type": "Commit", "comment": ""}], "description": "Netty is an asynchronous event-driven network application framework for the rapid development of maintainable high-performance protocol servers & clients. The \"HttpPostRequestDecoder\" can be tricked to accumulate data. While the decoder can store items on the disk if configured so, there are no limits to the number of fields the form can have, an attacker can send a chunked post consisting of many small fields that will be accumulated in the \"bodyListHttpData\" list. The decoder cumulates bytes in the `undecodedChunk` buffer until it can decode a field, this field can cumulate data without limits. This issue affects versions through 4.1.107.Final, and 5.0.0.Alpha1 through 5.0.0.Alpha2.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-io.netty:netty-codec-http-4.1.34.Final", "similarityId": null, "fixResolutionText": "4.1.97.Final-redhat-00004", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-21290", "cveName": "CVE-2021-21290", "score": 5.5, "severity": "Medium", "publishDate": "2021-02-08T20:15:00", "references": ["https://github.com/advisories/GHSA-5mcr-gq6c-3hq2", "https://github.com/netty/netty/commit/c735357bf29d07856ad171c6611a2e1a0e0000ec", "https://github.com/netty/netty/blob/e5951d46fc89db507ba7d2968d2ede26378f0b04/codec-http/src/main/java/io/netty/handler/codec/http/multipart/AbstractDiskHttpData.java#L80-L101"], "referencesData": [{"url": "https://github.com/advisories/GHSA-5mcr-gq6c-3hq2", "type": "Advisory", "comment": ""}, {"url": "https://github.com/netty/netty/commit/c735357bf29d07856ad171c6611a2e1a0e0000ec", "type": "Commit", "comment": ""}, {"url": "https://github.com/netty/netty/blob/e5951d46fc89db507ba7d2968d2ede26378f0b04/codec-http/src/main/java/io/netty/handler/codec/http/multipart/AbstractDiskHttpData.java#L80-L101", "type": "Other", "comment": "Vulnerable code"}], "description": "Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final and 5.x.Alpha there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method \"File.createTempFile\" on unix-like systems creates a random file, but, by default will create this file with the permissions \"-rw-r--r--\". Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty's \"AbstractDiskHttpData\" is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own \"java.io.tmpdir\" when you start the JVM or use \"DefaultHttpDataFactory.setBaseDir(...)\" to set the directory to something that is only readable by the current user.", "cvss": {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 1.9, "attackVector": "LOCAL", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "NONE", "exploitCodeMaturity": "3.4", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-io.netty:netty-common-4.1.34.Final", "similarityId": null, "fixResolutionText": "4.1.112.Final-redhat-00001", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-378", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2024-47535", "cveName": "CVE-2024-47535", "score": 6.8, "severity": "Medium", "publishDate": "2024-11-12T16:15:22", "references": ["https://github.com/advisories/GHSA-xq3w-v528-46rv", "https://github.com/netty/netty/commit/fbf7a704a82e7449b48bd0bbb679f5661c6d61a3", "https://github.com/advisories/GHSA-q4h9-7rxj-7gx2"], "referencesData": [{"url": "https://github.com/advisories/GHSA-xq3w-v528-46rv", "type": "Advisory", "comment": ""}, {"url": "https://github.com/netty/netty/commit/fbf7a704a82e7449b48bd0bbb679f5661c6d61a3", "type": "Commit", "comment": ""}, {"url": "https://github.com/advisories/GHSA-q4h9-7rxj-7gx2", "type": "Advisory", "comment": ""}], "description": "Netty is an asynchronous event-driven network application framework for rapidly developing maintainable high-performance protocol servers & clients. An unsafe reading of the environment file could potentially cause a denial of service in Netty. When loaded on a Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crashes. This vulnerability affects Netty versions through 4.1.114.Final, 4.2.0.Alpha1 through 4.2.0.Alpha5, 4.2.0.Beta1, and 5.0.0.Alpha1 through 5.0.0.Alpha5.", "cvss": {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-io.netty:netty-common-4.1.34.Final", "similarityId": null, "fixResolutionText": "4.1.112.Final-redhat-00001", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-21290", "cveName": "CVE-2021-21290", "score": 5.5, "severity": "Medium", "publishDate": "2021-02-08T20:15:00", "references": ["https://github.com/advisories/GHSA-5mcr-gq6c-3hq2", "https://github.com/netty/netty/commit/c735357bf29d07856ad171c6611a2e1a0e0000ec", "https://github.com/netty/netty/blob/e5951d46fc89db507ba7d2968d2ede26378f0b04/codec-http/src/main/java/io/netty/handler/codec/http/multipart/AbstractDiskHttpData.java#L80-L101"], "referencesData": [{"url": "https://github.com/advisories/GHSA-5mcr-gq6c-3hq2", "type": "Advisory", "comment": ""}, {"url": "https://github.com/netty/netty/commit/c735357bf29d07856ad171c6611a2e1a0e0000ec", "type": "Commit", "comment": ""}, {"url": "https://github.com/netty/netty/blob/e5951d46fc89db507ba7d2968d2ede26378f0b04/codec-http/src/main/java/io/netty/handler/codec/http/multipart/AbstractDiskHttpData.java#L80-L101", "type": "Other", "comment": "Vulnerable code"}], "description": "Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final and 5.x.Alpha there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method \"File.createTempFile\" on unix-like systems creates a random file, but, by default will create this file with the permissions \"-rw-r--r--\". Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty's \"AbstractDiskHttpData\" is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own \"java.io.tmpdir\" when you start the JVM or use \"DefaultHttpDataFactory.setBaseDir(...)\" to set the directory to something that is only readable by the current user.", "cvss": {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 1.9, "attackVector": "LOCAL", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "NONE", "exploitCodeMaturity": "3.4", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Low", "cvss3Severity": null}, {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-io.netty:netty-handler-4.1.34.Final", "similarityId": null, "fixResolutionText": "4.1.94.Final", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-378", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2023-34462", "cveName": "CVE-2023-34462", "score": 6.5, "severity": "Medium", "publishDate": "2023-06-22T23:15:00", "references": ["https://github.com/advisories/GHSA-6mjq-h674-j845", "https://github.com/netty/netty/commit/535da17e45201ae4278c0479e6162bb4127d4c32"], "referencesData": [{"url": "https://github.com/advisories/GHSA-6mjq-h674-j845", "type": "Advisory", "comment": ""}, {"url": "https://github.com/netty/netty/commit/535da17e45201ae4278c0479e6162bb4127d4c32", "type": "Commit", "comment": ""}], "description": "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In versions through 4.1.93.Final, 5.0.0.Alpha1 through 5.0.0.Alpha5, the `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the `SniHandler` to allocate 16MB of heap. The `SniHandler` class is a handler that waits for the TLS handshake to configure a `SslHandler` according to the indicated server name by the `ClientHello` record. For this matter it allocates a `ByteBuf` using the value defined in the `ClientHello` record. Normally the value of the packet should be smaller than the handshake packet but there are not checks done here and the way the code is written, it is possible to craft a packet that makes the `SslClientHelloHandler`.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-io.netty:netty-handler-4.1.34.Final", "similarityId": null, "fixResolutionText": "4.1.94.Final", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-15250", "cveName": "CVE-2020-15250", "score": 5.5, "severity": "Medium", "publishDate": "2020-10-11T23:00:00", "references": ["https://github.com/advisories/GHSA-269g-pwp5-87pp", "https://github.com/junit-team/junit4/blob/7852b90cfe1cea1e0cdaa19d490c83f0d8684b50/doc/ReleaseNotes4.13.1.md", "https://github.com/junit-team/junit4/issues/1676", "https://github.com/junit-team/junit4/commit/610155b8c22138329f0723eec22521627dbc52ae"], "referencesData": [{"url": "https://github.com/advisories/GHSA-269g-pwp5-87pp", "type": "Advisory", "comment": ""}, {"url": "https://github.com/junit-team/junit4/blob/7852b90cfe1cea1e0cdaa19d490c83f0d8684b50/doc/ReleaseNotes4.13.1.md", "type": "Release Note", "comment": ""}, {"url": "https://github.com/junit-team/junit4/issues/1676", "type": "Issue", "comment": ""}, {"url": "https://github.com/junit-team/junit4/commit/610155b8c22138329f0723eec22521627dbc52ae", "type": "Commit", "comment": ""}], "description": "In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this directory they are, by default, readable by other users on that same system. This vulnerability does not allow other users to overwrite the contents of these directories or files. This is purely an information disclosure vulnerability. This vulnerability impacts you if the JUnit tests write sensitive information, like API keys or passwords, into the temporary folder, and the JUnit tests execute in an environment where the OS has other untrusted users. Because certain JDK file system APIs were only added in JDK 1.7, this this fix is dependent upon the version of the JDK you are using. For Java 1.7 and higher users: this vulnerability is fixed in 4.13.1. For Java 1.6 and lower users: no patch is available, you must use the workaround below. If you are unable to patch, or are stuck running on Java 1.6, specifying the `java.io.tmpdir` system environment variable to a directory that is exclusively owned by the executing user will fix this vulnerability. For more information, including an example of vulnerable code, see the referenced GitHub Security Advisory.", "cvss": {"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.5, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-junit:junit-4.12", "similarityId": null, "fixResolutionText": "4.13.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-732", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2023-26119", "cveName": "CVE-2023-26119", "score": 9.8, "severity": "Critical", "publishDate": "2023-04-03T05:15:00", "references": ["https://github.com/advisories/GHSA-3xrr-7m6p-p7xh", "https://github.com/HtmlUnit/htmlunit/commit/641325bbc84702dc9800ec7037aec061ce21956b", "https://siebene.github.io/2022/12/30/HtmlUnit-RCE/", "https://www.htmlunit.org/changes-report.html#a3.0.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3xrr-7m6p-p7xh", "type": "Advisory", "comment": ""}, {"url": "https://github.com/HtmlUnit/htmlunit/commit/641325bbc84702dc9800ec7037aec061ce21956b", "type": "Commit", "comment": ""}, {"url": "https://siebene.github.io/2022/12/30/HtmlUnit-RCE/", "type": "POC/Exploit", "comment": ""}, {"url": "https://www.htmlunit.org/changes-report.html#a3.0.0", "type": "Release Note", "comment": ""}], "description": "The package net.sourceforge.htmlunit:htmlunit in versions prior to 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSLT, when browsing the attacker's webpage. Note: The package name changed to org.htmlunit:htmlunit in the fixed version 3.0.0.", "cvss": {"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Critical", "cvss3Severity": "Critical"}, "cvssList": [{"score": 9.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "Critical"}], "recommendations": null, "packageId": "Maven-net.sourceforge.htmlunit:htmlunit-2.33", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-94", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-5529", "cveName": "CVE-2020-5529", "score": 8.1, "severity": "High", "publishDate": "2020-02-11T12:15:00", "references": ["https://github.com/HtmlUnit/htmlunit/releases/tag/2.37.0", "https://github.com/advisories/GHSA-5mh9-r3rr-9597", "https://github.com/HtmlUnit/htmlunit/commit/0ffc3f79dbead058b2aeffa6f75a01ef91561e37", "https://github.com/HtmlUnit/htmlunit/commit/934390fefcd2cd58e6d86f2bc19d811ae17bfa28"], "referencesData": [{"url": "https://github.com/HtmlUnit/htmlunit/releases/tag/2.37.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/advisories/GHSA-5mh9-r3rr-9597", "type": "Advisory", "comment": ""}, {"url": "https://github.com/HtmlUnit/htmlunit/commit/0ffc3f79dbead058b2aeffa6f75a01ef91561e37", "type": "Commit", "comment": "Initial fix"}, {"url": "https://github.com/HtmlUnit/htmlunit/commit/934390fefcd2cd58e6d86f2bc19d811ae17bfa28", "type": "Commit", "comment": "Additional fix"}], "description": "HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is done in an improper way, hence a malicious JavaScript code can execute arbitrary Java code on the application.", "cvss": {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 8.1, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-net.sourceforge.htmlunit:htmlunit-2.33", "similarityId": null, "fixResolutionText": "2.37.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-665", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2023-2798", "cveName": "CVE-2023-2798", "score": 7.5, "severity": "High", "publishDate": "2023-05-25T05:01:00", "references": ["https://github.com/advisories/GHSA-rc44-5cmh-879m", "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54613", "https://github.com/HtmlUnit/htmlunit/commit/940dc7fd8af9f46ca448c1e548b8f6d064a64290"], "referencesData": [{"url": "https://github.com/advisories/GHSA-rc44-5cmh-879m", "type": "Advisory", "comment": ""}, {"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54613", "type": "Issue", "comment": ""}, {"url": "https://github.com/HtmlUnit/htmlunit/commit/940dc7fd8af9f46ca448c1e548b8f6d064a64290", "type": "Commit", "comment": ""}], "description": "Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS). If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may support a denial of service attack. This issue affects net.sourceforge.htmlunit:htmlunit versions prior to 2.70.0.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-net.sourceforge.htmlunit:htmlunit-2.33", "similarityId": null, "fixResolutionText": "2.70.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-29546", "cveName": "CVE-2022-29546", "score": 7.5, "severity": "High", "publishDate": "2022-04-25T03:15:00", "references": ["https://github.com/advisories/GHSA-6jmm-mp6w-4rrg", "https://htmlunit.sourceforge.io/changes-report.html#a2.61.0", "https://github.com/HtmlUnit/htmlunit-neko/commit/9d2aecd69223469e40c12ca3edddda09009110cc"], "referencesData": [{"url": "https://github.com/advisories/GHSA-6jmm-mp6w-4rrg", "type": "Advisory", "comment": ""}, {"url": "https://htmlunit.sourceforge.io/changes-report.html#a2.61.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/HtmlUnit/htmlunit-neko/commit/9d2aecd69223469e40c12ca3edddda09009110cc", "type": "Commit", "comment": ""}], "description": "HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability. Crafted input associated with the parsing of Processing Instruction (PI) data leads to heap memory consumption. This is similar to CVE-2022-28366 but affects a much later version of the product.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-net.sourceforge.htmlunit:neko-htmlunit-2.33", "similarityId": null, "fixResolutionText": "2.61.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-24839", "cveName": "CVE-2022-24839", "score": 7.5, "severity": "High", "publishDate": "2022-04-11T22:15:00", "references": ["https://github.com/advisories/GHSA-9849-p7jc-9rmv", "https://github.com/advisories/GHSA-gx8x-g87m-h5q6", "https://github.com/sparklemotion/nekohtml/commit/a800fce3b079def130ed42a408ff1d09f89e773d", "https://github.com/sparklemotion/nekohtml/security/advisories/GHSA-9849-p7jc-9rmv", "https://github.com/sparklemotion/nokogiri/commit/4860eb08a5df914543cb4b2df59976d5d65d0349"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9849-p7jc-9rmv", "type": "Advisory", "comment": ""}, {"url": "https://github.com/advisories/GHSA-gx8x-g87m-h5q6", "type": "Advisory", "comment": "RubyGems"}, {"url": "https://github.com/sparklemotion/nekohtml/commit/a800fce3b079def130ed42a408ff1d09f89e773d", "type": "Commit", "comment": ""}, {"url": "https://github.com/sparklemotion/nekohtml/security/advisories/GHSA-9849-p7jc-9rmv", "type": "Advisory", "comment": "Maven"}, {"url": "https://github.com/sparklemotion/nokogiri/commit/4860eb08a5df914543cb4b2df59976d5d65d0349", "type": "Commit", "comment": "Ruby"}], "description": "\"org.cyberneko.html\" is an HTML parser written in Java. The fork of `org.cyberneko.html` used by Nokogiri (Rubygem) raises a `java.lang.OutOfMemoryError` exception when parsing ill-formed HTML markup. Note: The upstream library `org.cyberneko.html` is no longer maintained. Nokogiri uses its own fork of this library located at https://github.com/sparklemotion/nekohtml and this CVE applies only to that fork.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-net.sourceforge.htmlunit:neko-htmlunit-2.33", "similarityId": null, "fixResolutionText": "2.61.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-2047", "cveName": "CVE-2022-2047", "score": 2.7, "severity": "Low", "publishDate": "2022-07-07T21:15:10", "references": ["https://github.com/advisories/GHSA-cj7v-27pg-wf7q", "https://github.com/eclipse/jetty.project/pull/8015", "https://github.com/eclipse/jetty.project/commit/d1e64f469362bb9371d530cccded5ecb13fa1cb5", "https://github.com/eclipse/jetty.project/issues/8014"], "referencesData": [{"url": "https://github.com/advisories/GHSA-cj7v-27pg-wf7q", "type": "Advisory", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/pull/8015", "type": "Pull request", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/commit/d1e64f469362bb9371d530cccded5ecb13fa1cb5", "type": "Commit", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/issues/8014", "type": "Issue", "comment": ""}], "description": "In Eclipse Jetty versions through 9.4.46, 10.0.x through 10.0.9, and 11.0.x through 11.0.9, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario.", "cvss": {"score": 2.7, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 2.7, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Maven-org.eclipse.jetty:jetty-client-9.4.12.v20180830", "similarityId": null, "fixResolutionText": "9.4.47.v20220610", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-20", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2024-6763", "cveName": "CVE-2024-6763", "score": 5.3, "severity": "Medium", "publishDate": "2024-10-14T16:15:00", "references": ["https://github.com/advisories/GHSA-qh8g-58pp-2wxh", "https://github.com/jetty/jetty.project/pull/12012", "https://github.com/jetty/jetty.project/issues/12259", "https://github.com/jetty/jetty.project/commit/c880d9309b6f7b0730d69b4ec2179763d5d281cb", "https://github.com/jetty/jetty.project/releases/tag/jetty-12.0.11"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qh8g-58pp-2wxh", "type": "Advisory", "comment": ""}, {"url": "https://github.com/jetty/jetty.project/pull/12012", "type": "Pull request", "comment": ""}, {"url": "https://github.com/jetty/jetty.project/issues/12259", "type": "Issue", "comment": ""}, {"url": "https://github.com/jetty/jetty.project/commit/c880d9309b6f7b0730d69b4ec2179763d5d281cb", "type": "Commit", "comment": ""}, {"url": "https://github.com/jetty/jetty.project/releases/tag/jetty-12.0.11", "type": "Release Note", "comment": ""}], "description": "Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine. It includes a utility class, 'HttpURI', for URI/URL parsing. The 'HttpURI' class does insufficient validation on the authority segment of a URI. However the behavior of 'HttpURI' differs from the common browsers in how it handles a URI that would be considered invalid if fully validated against the RRC. Specifically, 'HttpURI' and the browser may differ on the value of the host extracted from an invalid URI. Thus a combination of Jetty and a vulnerable browser may be vulnerable to an open redirect attack or an SSRF attack if the URI is used after passing validation checks. This issue affects Eclipse Jetty versions 7.0.0.M0 through 12.0.11.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-org.eclipse.jetty:jetty-http-9.4.12.v20180830", "similarityId": null, "fixResolutionText": "9.4.57.v20241219", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1286", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2023-26049", "cveName": "CVE-2023-26049", "score": 5.3, "severity": "Medium", "publishDate": "2023-04-18T21:15:09", "references": ["https://github.com/advisories/GHSA-p26g-97m4-6q7c", "https://github.com/eclipse/jetty.project/releases/tag/jetty-11.0.14", "https://github.com/eclipse/jetty.project/pull/9339", "https://github.com/eclipse/jetty.project/commit/7b8c2c1bf081c7f408e5da3371c8c3c9802f09fd", "https://github.com/eclipse/jetty.project/pull/9352", "https://github.com/eclipse/jetty.project/commit/1be1401bafb4c46fae3c234c8e93743a661dcf21"], "referencesData": [{"url": "https://github.com/advisories/GHSA-p26g-97m4-6q7c", "type": "Advisory", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/releases/tag/jetty-11.0.14", "type": "Release Note", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/pull/9339", "type": "Pull request", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/commit/7b8c2c1bf081c7f408e5da3371c8c3c9802f09fd", "type": "Commit", "comment": "10.x"}, {"url": "https://github.com/eclipse/jetty.project/pull/9352", "type": "Pull request", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/commit/1be1401bafb4c46fae3c234c8e93743a661dcf21", "type": "Commit", "comment": "9.x"}], "description": "Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `\"` (double quote), it will continue to read the cookie string until it sees a closing quote `--` even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE=\"b;` `JSESSIONID=1337;` `c=d\"` will be parsed as one cookie, with the name `DISPLAY_LANGUAGE` and a value of `b; JSESSIONID=1337;` `c=d` instead of 3 separate cookies. This has security implications because if, say, `JSESSIONID` is an HttpOnly cookie, and the `DISPLAY_LANGUAGE` cookie value is rendered on the page, an attacker can smuggle the `JSESSIONID` cookie into the `DISPLAY_LANGUAGE` cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This vulnerability affects versions prior to 9.4.51, 10.0.x prior to 10.0.14, 11.0.x prior to 11.0.14, and 12.0.x prior to 12.0.0.beta0.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-org.eclipse.jetty:jetty-http-9.4.12.v20180830", "similarityId": null, "fixResolutionText": "9.4.57.v20241219", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-200", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-27218", "cveName": "CVE-2020-27218", "score": 4.8, "severity": "Medium", "publishDate": "2020-11-28T01:15:00", "references": ["https://bugs.eclipse.org/bugs/show_bug.cgi?id=568892", "https://github.com/advisories/GHSA-86wm-rrjm-8wh8", "https://github.com/eclipse/jetty.project/commit/14f94f738df5adf68549749d01d4f9d97ea51452", "https://github.com/eclipse/jetty.project/issues/5605"], "referencesData": [{"url": "https://bugs.eclipse.org/bugs/show_bug.cgi?id=568892", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/advisories/GHSA-86wm-rrjm-8wh8", "type": "Advisory", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/commit/14f94f738df5adf68549749d01d4f9d97ea51452", "type": "Commit", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/issues/5605", "type": "Issue", "comment": ""}], "description": "In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta3, and 11.0.0.alpha0 to 11.0.0.beta3, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single erconnection, and if an attacker can send a request with a body that is received entirely but not consumed by the application, then a subsequent request on the same connection will see that body prepended to its body. The attacker will not see any data but may inject data into the body of the subsequent request.", "cvss": {"score": 4.8, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.8, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 4.8, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-org.eclipse.jetty:jetty-http-9.4.12.v20180830", "similarityId": null, "fixResolutionText": "9.4.57.v20241219", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-226", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-27223", "cveName": "CVE-2020-27223", "score": 5.3, "severity": "Medium", "publishDate": "2021-02-26T22:15:00", "references": ["https://bugs.eclipse.org/bugs/show_bug.cgi?id=571128", "https://github.com/advisories/GHSA-m394-8rww-3jr7", "https://github.com/eclipse/jetty.project/commit/10e531756b972162eed402c44d0244f7f6b85131"], "referencesData": [{"url": "https://bugs.eclipse.org/bugs/show_bug.cgi?id=571128", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-m394-8rww-3jr7", "type": "Advisory", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/commit/10e531756b972162eed402c44d0244f7f6b85131", "type": "Commit", "comment": ""}], "description": "In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of \u201cquality\u201d (i.e. q) parameters, the server may enter a denial of service (DoS) state due to high CPU usage processing those quality values, resulting in minutes of CPU time exhausted processing those quality values.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-org.eclipse.jetty:jetty-http-9.4.12.v20180830", "similarityId": null, "fixResolutionText": "9.4.57.v20241219", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-28169", "cveName": "CVE-2021-28169", "score": 5.3, "severity": "Medium", "publishDate": "2021-06-09T02:15:06", "references": ["https://github.com/advisories/GHSA-gwcr-j4wh-j3cq", "https://github.com/eclipse/jetty.project/commit/1c05b0bcb181c759e98b060bded0b9376976b055", "https://github.com/eclipse/jetty.project/commit/f58dbedcd05b2aee43c8faa709ba2deaa4361036", "https://github.com/eclipse/jetty.project/issues/6263", "https://github.com/eclipse/jetty.project/pull/6261", "https://github.com/eclipse/jetty.project/pull/6262"], "referencesData": [{"url": "https://github.com/advisories/GHSA-gwcr-j4wh-j3cq", "type": "Advisory", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/commit/1c05b0bcb181c759e98b060bded0b9376976b055", "type": "Commit", "comment": "9.4.x"}, {"url": "https://github.com/eclipse/jetty.project/commit/f58dbedcd05b2aee43c8faa709ba2deaa4361036", "type": "Commit", "comment": "10.0.x and 11.0.x"}, {"url": "https://github.com/eclipse/jetty.project/issues/6263", "type": "Issue", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/pull/6261", "type": "Pull request", "comment": "9.4.x"}, {"url": "https://github.com/eclipse/jetty.project/pull/6262", "type": "Pull request", "comment": "10.0.x and 11.0.x"}], "description": "For Eclipse Jetty versions through 9.4.40, 10.0.0 through 10.0.2, 11.0.0 through 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to \"/concat?/%2557EB-INF/web.xml\" can retrieve the \"web.xml\" file. This can reveal sensitive information regarding the implementation of a web application.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "NONE", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-org.eclipse.jetty:jetty-http-9.4.12.v20180830", "similarityId": null, "fixResolutionText": "9.4.57.v20241219", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-200", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-2047", "cveName": "CVE-2022-2047", "score": 2.7, "severity": "Low", "publishDate": "2022-07-07T21:15:10", "references": ["https://github.com/advisories/GHSA-cj7v-27pg-wf7q", "https://github.com/eclipse/jetty.project/pull/8015", "https://github.com/eclipse/jetty.project/commit/d1e64f469362bb9371d530cccded5ecb13fa1cb5", "https://github.com/eclipse/jetty.project/issues/8014"], "referencesData": [{"url": "https://github.com/advisories/GHSA-cj7v-27pg-wf7q", "type": "Advisory", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/pull/8015", "type": "Pull request", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/commit/d1e64f469362bb9371d530cccded5ecb13fa1cb5", "type": "Commit", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/issues/8014", "type": "Issue", "comment": ""}], "description": "In Eclipse Jetty versions through 9.4.46, 10.0.x through 10.0.9, and 11.0.x through 11.0.9, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario.", "cvss": {"score": 2.7, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 2.7, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Maven-org.eclipse.jetty:jetty-http-9.4.12.v20180830", "similarityId": null, "fixResolutionText": "9.4.57.v20241219", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-20", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2023-26048", "cveName": "CVE-2023-26048", "score": 5.3, "severity": "Medium", "publishDate": "2023-04-18T21:15:08", "references": ["https://github.com/advisories/GHSA-qw69-rqj8-6qw8", "https://github.com/eclipse/jetty.project/issues/9076", "https://github.com/eclipse/jetty.project/pull/9344", "https://github.com/eclipse/jetty.project/commit/622befbd0d52f61c1acd41b4ef12458311494f1a", "https://github.com/eclipse/jetty.project/pull/9345", "https://github.com/eclipse/jetty.project/commit/c3021592218da289563987e6f7fbe05f8704b285", "https://github.com/eclipse/jetty.project/releases/tag/jetty-11.0.14"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qw69-rqj8-6qw8", "type": "Advisory", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/issues/9076", "type": "Issue", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/pull/9344", "type": "Pull request", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/commit/622befbd0d52f61c1acd41b4ef12458311494f1a", "type": "Commit", "comment": "10.x"}, {"url": "https://github.com/eclipse/jetty.project/pull/9345", "type": "Pull request", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/commit/c3021592218da289563987e6f7fbe05f8704b285", "type": "Commit", "comment": "9.x"}, {"url": "https://github.com/eclipse/jetty.project/releases/tag/jetty-11.0.14", "type": "Release Note", "comment": ""}], "description": "Jetty is a java-based web server and servlet engine. In affected versions prior to 9.4.51, 10.0.x prior to 10.0.14,11.0.x prior to 11.0.14, and 12.0.x prior to 12.0.0.beta0 servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` when the client sends a multipart request with a part that has a name but no filename and very large content. This happens even with the default settings of `fileSizeThreshold=0` which should stream the whole part content to disk. An attacker client may send a large multipart request and cause the server to throw `OutOfMemoryError`. However, the server may be able to recover after the `OutOfMemoryError` and continue its service `--` although it may take some time. Users are advised to upgrade. Users unable to upgrade may set the multipart parameter `maxRequestSize`, which must be set to a non-negative value, so the whole multipart content is limited (although still read into memory).", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-org.eclipse.jetty:jetty-http-9.4.12.v20180830", "similarityId": null, "fixResolutionText": "9.4.57.v20241219", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2023-36478", "cveName": "CVE-2023-36478", "score": 7.5, "severity": "High", "publishDate": "2023-10-10T07:08:00", "references": ["https://github.com/advisories/GHSA-wgh7-54f2-x98r", "https://github.com/eclipse/jetty.project/issues/9554", "https://github.com/eclipse/jetty.project/pull/9634", "https://github.com/eclipse/jetty.project/commit/a8c9eea75bffcb2b2557acefb75856707654a56f", "https://github.com/eclipse/jetty.project/releases/tag/jetty-11.0.16"], "referencesData": [{"url": "https://github.com/advisories/GHSA-wgh7-54f2-x98r", "type": "Advisory", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/issues/9554", "type": "Issue", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/pull/9634", "type": "Pull request", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/commit/a8c9eea75bffcb2b2557acefb75856707654a56f", "type": "Commit", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/releases/tag/jetty-11.0.16", "type": "Release Note", "comment": ""}], "description": "Eclipse Jetty provides a web server and servlet container.An integer overflow in `MetaDataBuilder.checkSize` allows for HTTP/2 HPACK header values to exceed their size limit. `MetaDataBuilder.java` determines if a header name or value exceeds the size limit, and throws an exception if the limit is exceeded. However, when the length is very large and huffman is true, the multiplication by 4 in line 295 will overflow, and length will become negative. `(_size+length)` will now be negative, and the check on line 296 will not be triggered. Furthermore, `MetaDataBuilder.checkSize` allows for user-entered HPACK header value sizes to be negative, potentially leading to a very large buffer allocation later on when the user-entered size is multiplied by 2. \nThis means that if a user provides a negative length value (or, more precisely, a length value which, when multiplied by the 4/3 fudge factor, is negative), and this length value is a very large positive number when multiplied by 2, then the user can cause a very large buffer to be allocated on the server. Users of HTTP/2 can be impacted by a remote denial of service attack. \nThis issue affects the packages org.eclipse.jetty:jetty-http in versions 9.3.0.M0 through 9.4.52.v20230823, 10.0.0-alpha0 through 10.0.15, and 11.0.0-alpha0 through 11.0.15, 12.0.0.alpha0 through 12.0.0.beta1, org.eclipse.jetty.http3:http3-qpack in versions 10.0.8 through 10.0.15, and 11.0.8 through 11.0.15, org.eclipse.jetty.http2:jetty-http2-hpack, org.eclipse.jetty.http3:jetty-http3-qpack in versions 12.0.0.alpha0 through 12.0.0.beta1, and org.eclipse.jetty.http2:http2-hpack versions 9.3.0.M0 through 9.4.52.v20230823, 10.0.0-alpha0 through 10.0.15, and 11.0.0-alpha0 through 11.0.15.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-org.eclipse.jetty:jetty-http-9.4.12.v20180830", "similarityId": null, "fixResolutionText": "9.4.57.v20241219", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-190", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2023-40167", "cveName": "CVE-2023-40167", "score": 5.3, "severity": "Medium", "publishDate": "2023-08-18T11:59:00", "references": ["https://github.com/advisories/GHSA-hmr7-m48g-48f6", "https://github.com/eclipse/jetty.project/pull/10329", "https://github.com/eclipse/jetty.project/commit/003e46cae4d71e147d51fb8ea378e8989d381cc3"], "referencesData": [{"url": "https://github.com/advisories/GHSA-hmr7-m48g-48f6", "type": "Advisory", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/pull/10329", "type": "Pull request", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/commit/003e46cae4d71e147d51fb8ea378e8989d381cc3", "type": "Commit", "comment": ""}], "description": "The package Jetty in versions 9.0.x prior to 9.4.52.v20230823, 10.0.x prior to 10.0.16, 11.0.x prior to 11.0.16 and 12.0.x prior to 12.0.1\naccepts the '+' character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and other servers routinely reject such requests with 400 responses. There is no known exploit scenario, but it is conceivable that request smuggling could result if jetty is used in combination with a server that does not close the connection after sending such a 400 response.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-org.eclipse.jetty:jetty-http-9.4.12.v20180830", "similarityId": null, "fixResolutionText": "9.4.57.v20241219", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-130", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2021-28165", "cveName": "CVE-2021-28165", "score": 7.5, "severity": "High", "publishDate": "2021-04-01T15:15:14", "references": ["https://github.com/advisories/GHSA-26vr-8j45-3r4w", "https://github.com/eclipse/jetty.project/issues/6072", "https://github.com/eclipse/jetty.project/releases/tag/jetty-11.0.2", "https://github.com/eclipse/jetty.project/pull/6073", "https://github.com/eclipse/jetty.project/pull/6074", "https://github.com/eclipse/jetty.project/commit/294b2ba02b667548617a94cd99592110ac230add", "https://github.com/eclipse/jetty.project/commit/039c7386d0f3087d7c8aa19ea6001b24c95b9f16"], "referencesData": [{"url": "https://github.com/advisories/GHSA-26vr-8j45-3r4w", "type": "Advisory", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/issues/6072", "type": "Issue", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/releases/tag/jetty-11.0.2", "type": "Release Note", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/pull/6073", "type": "Pull request", "comment": "9.4.X"}, {"url": "https://github.com/eclipse/jetty.project/pull/6074", "type": "Pull request", "comment": "10.0.X"}, {"url": "https://github.com/eclipse/jetty.project/commit/294b2ba02b667548617a94cd99592110ac230add", "type": "Commit", "comment": "9.4.X"}, {"url": "https://github.com/eclipse/jetty.project/commit/039c7386d0f3087d7c8aa19ea6001b24c95b9f16", "type": "Commit", "comment": "10.0.X"}], "description": "In Eclipse Jetty from 7.2.2.v20101205 to 9.4.38.v20210224, 10.0.X before 10.0.2 and 11.0.X before 11.0.2, CPU usage can reach 100% upon receiving a large invalid TLS frame.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "COMPLETE", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "High", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-org.eclipse.jetty:jetty-io-9.4.12.v20180830", "similarityId": null, "fixResolutionText": "9.4.39.v20210325", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-400", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2023-26048", "cveName": "CVE-2023-26048", "score": 5.3, "severity": "Medium", "publishDate": "2023-04-18T21:15:08", "references": ["https://github.com/advisories/GHSA-qw69-rqj8-6qw8", "https://github.com/eclipse/jetty.project/issues/9076", "https://github.com/eclipse/jetty.project/pull/9344", "https://github.com/eclipse/jetty.project/commit/622befbd0d52f61c1acd41b4ef12458311494f1a", "https://github.com/eclipse/jetty.project/pull/9345", "https://github.com/eclipse/jetty.project/commit/c3021592218da289563987e6f7fbe05f8704b285", "https://github.com/eclipse/jetty.project/releases/tag/jetty-11.0.14"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qw69-rqj8-6qw8", "type": "Advisory", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/issues/9076", "type": "Issue", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/pull/9344", "type": "Pull request", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/commit/622befbd0d52f61c1acd41b4ef12458311494f1a", "type": "Commit", "comment": "10.x"}, {"url": "https://github.com/eclipse/jetty.project/pull/9345", "type": "Pull request", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/commit/c3021592218da289563987e6f7fbe05f8704b285", "type": "Commit", "comment": "9.x"}, {"url": "https://github.com/eclipse/jetty.project/releases/tag/jetty-11.0.14", "type": "Release Note", "comment": ""}], "description": "Jetty is a java-based web server and servlet engine. In affected versions prior to 9.4.51, 10.0.x prior to 10.0.14,11.0.x prior to 11.0.14, and 12.0.x prior to 12.0.0.beta0 servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` when the client sends a multipart request with a part that has a name but no filename and very large content. This happens even with the default settings of `fileSizeThreshold=0` which should stream the whole part content to disk. An attacker client may send a large multipart request and cause the server to throw `OutOfMemoryError`. However, the server may be able to recover after the `OutOfMemoryError` and continue its service `--` although it may take some time. Users are advised to upgrade. Users unable to upgrade may set the multipart parameter `maxRequestSize`, which must be set to a non-negative value, so the whole multipart content is limited (although still read into memory).", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-org.eclipse.jetty:jetty-util-9.4.12.v20180830", "similarityId": null, "fixResolutionText": "9.4.51.v20230217", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-10241", "cveName": "CVE-2019-10241", "score": 6.1, "severity": "Medium", "publishDate": "2019-04-22T20:29:00", "references": ["https://github.com/advisories/GHSA-7vx9-xjhr-rw6h", "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=928444", "https://github.com/eclipse/jetty.project/commit/ca77bd384a2970cabbbdab25cf6251c6fb76cd21", "https://github.com/eclipse/jetty.project/issues/3319", "https://bugs.eclipse.org/bugs/show_bug.cgi?id=546121"], "referencesData": [{"url": "https://github.com/advisories/GHSA-7vx9-xjhr-rw6h", "type": "Advisory", "comment": ""}, {"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=928444", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/commit/ca77bd384a2970cabbbdab25cf6251c6fb76cd21", "type": "Commit", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/issues/3319", "type": "Issue", "comment": ""}, {"url": "https://bugs.eclipse.org/bugs/show_bug.cgi?id=546121", "type": "Issue", "comment": ""}], "description": "In Eclipse Jetty versions 7, 8, 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client users a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.", "cvss": {"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.3, "attackVector": "NETWORK", "attackComplexity": "MEDIUM", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": "8.6", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-org.eclipse.jetty:jetty-util-9.4.12.v20180830", "similarityId": null, "fixResolutionText": "9.4.51.v20230217", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-79", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-10246", "cveName": "CVE-2019-10246", "score": 5.3, "severity": "Medium", "publishDate": "2019-04-22T20:29:00", "references": ["https://bugs.eclipse.org/bugs/show_bug.cgi?id=546576", "https://security.netapp.com/advisory/ntap-20190509-0003/", "https://github.com/eclipse/jetty.project/issues/3549", "https://github.com/eclipse/jetty.project/pull/3552", "https://github.com/eclipse/jetty.project/commit/1565b5f160e600d08da9b00edf081fb353a443d9"], "referencesData": [{"url": "https://bugs.eclipse.org/bugs/show_bug.cgi?id=546576", "type": "Mail Thread", "comment": ""}, {"url": "https://security.netapp.com/advisory/ntap-20190509-0003/", "type": "Advisory", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/issues/3549", "type": "Issue", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/pull/3552", "type": "Pull request", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/commit/1565b5f160e600d08da9b00edf081fb353a443d9", "type": "Commit", "comment": ""}], "description": "In Eclipse Jetty version before 9.2.28, 9.3.x before 9.3.27 and 9.4.x before 9.4.17, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information reveal is restricted to only the content in the configured base resource directories.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "NONE", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-org.eclipse.jetty:jetty-util-9.4.12.v20180830", "similarityId": null, "fixResolutionText": "9.4.51.v20230217", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-200", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "Cx3718d76a-e8e1", "cveName": "Cx3718d76a-e8e1", "score": 3.9, "severity": "Low", "publishDate": "2023-07-07T12:00:00", "references": ["https://github.com/advisories/GHSA-58qw-p7qm-5rvh", "https://github.com/eclipse/jetty.project/pull/10067", "https://github.com/eclipse/jetty.project/commit/9a05c75ad28ebad4abbe624fa432664c59763747", "https://github.com/eclipse/jetty.project/releases/tag/jetty-12.0.0", "https://github.com/eclipse/jetty.project/issues/10066"], "referencesData": [{"url": "https://github.com/advisories/GHSA-58qw-p7qm-5rvh", "type": "Advisory", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/pull/10067", "type": "Pull request", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/commit/9a05c75ad28ebad4abbe624fa432664c59763747", "type": "Commit", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/releases/tag/jetty-12.0.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/eclipse/jetty.project/issues/10066", "type": "Issue", "comment": ""}], "description": "The package org.eclipse.jetty:jetty-xml in versions prior to 9.4.52, 10.0.x prior to 10.0.16, 11.0.x prior to 11.0.16 and 12.0.x prior to 12.0.0.beta4 is vulnerable to Improper Restriction of XML External Entity Reference(XXE), while parsing the xml configuration files using \"XmlParser\". An attacker might exploit this vulnerability in order to achieve SSRF or cause a Denial of Service.", "cvss": {"score": 3.9, "attackVector": "LOCAL", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.9, "attackVector": "LOCAL", "attackComplexity": "HIGH", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Maven-org.eclipse.jetty:jetty-xml-9.4.12.v20180830", "similarityId": null, "fixResolutionText": "9.4.52.v20230823", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-611", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2023-5072", "cveName": "CVE-2023-5072", "score": 7.5, "severity": "High", "publishDate": "2023-10-12T17:15:10", "references": ["https://github.com/advisories/GHSA-4jq9-2xhw-jpx7", "https://github.com/advisories/GHSA-rm7j-f5g5-27vv", "https://github.com/stleary/JSON-java/issues/758", "https://github.com/stleary/JSON-java/pull/759", "https://github.com/stleary/JSON-java/commit/60662e2f8384d3449822a3a1179bfe8de67b55bb", "https://github.com/stleary/JSON-java/releases/tag/20231013", "https://github.com/stleary/JSON-java/issues/771", "https://github.com/stleary/JSON-java/pull/772", "https://github.com/stleary/JSON-java/commit/beb2fb570674a6ce62f37b344e9ab4445b7a7899"], "referencesData": [{"url": "https://github.com/advisories/GHSA-4jq9-2xhw-jpx7", "type": "Advisory", "comment": ""}, {"url": "https://github.com/advisories/GHSA-rm7j-f5g5-27vv", "type": "Advisory", "comment": ""}, {"url": "https://github.com/stleary/JSON-java/issues/758", "type": "Issue", "comment": ""}, {"url": "https://github.com/stleary/JSON-java/pull/759", "type": "Pull request", "comment": ""}, {"url": "https://github.com/stleary/JSON-java/commit/60662e2f8384d3449822a3a1179bfe8de67b55bb", "type": "Commit", "comment": ""}, {"url": "https://github.com/stleary/JSON-java/releases/tag/20231013", "type": "Release Note", "comment": ""}, {"url": "https://github.com/stleary/JSON-java/issues/771", "type": "Issue", "comment": ""}, {"url": "https://github.com/stleary/JSON-java/pull/772", "type": "Pull request", "comment": ""}, {"url": "https://github.com/stleary/JSON-java/commit/beb2fb570674a6ce62f37b344e9ab4445b7a7899", "type": "Commit", "comment": ""}], "description": "Denial of Service (DoS) in JSON-Java in versions prior to 20231013. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-org.json:json-20180813", "similarityId": null, "fixResolutionText": "20231013", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-45688", "cveName": "CVE-2022-45688", "score": 7.5, "severity": "High", "publishDate": "2022-12-13T15:15:00", "references": ["https://github.com/advisories/GHSA-3vqj-43w4-2q58", "https://github.com/dromara/hutool/issues/2748", "https://github.com/stleary/JSON-java/issues/708", "https://github.com/stleary/JSON-java/pull/720", "https://github.com/stleary/JSON-java/commit/401495ae86635978206adeb67cca472d4c2b39ce", "https://github.com/stleary/JSON-java/releases/tag/20230227", "https://github.com/dromara/hutool/releases/tag/5.8.25", "https://github.com/dromara/hutool/commit/6a2b585de0a380e8c12016dbaa1620b69be11b8c"], "referencesData": [{"url": "https://github.com/advisories/GHSA-3vqj-43w4-2q58", "type": "Advisory", "comment": ""}, {"url": "https://github.com/dromara/hutool/issues/2748", "type": "Issue", "comment": "Issue in Hutool"}, {"url": "https://github.com/stleary/JSON-java/issues/708", "type": "Issue", "comment": "Issue in JSON-java"}, {"url": "https://github.com/stleary/JSON-java/pull/720", "type": "Pull request", "comment": "PR in JSON-java"}, {"url": "https://github.com/stleary/JSON-java/commit/401495ae86635978206adeb67cca472d4c2b39ce", "type": "Commit", "comment": "Fix in JSON-java"}, {"url": "https://github.com/stleary/JSON-java/releases/tag/20230227", "type": "Release Note", "comment": "JSON-java"}, {"url": "https://github.com/dromara/hutool/releases/tag/5.8.25", "type": "Release Note", "comment": "Hutool"}, {"url": "https://github.com/dromara/hutool/commit/6a2b585de0a380e8c12016dbaa1620b69be11b8c", "type": "Commit", "comment": "Fix in Hutool"}], "description": "A stack overflow in the \"XML.toJSONObject\" component of hutool-json allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data. This vulnerability affects \"org.json:json\" package versions prior to 20230227, and \"cn.hutool:hutool-json\" package versions prior to 5.8.25.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-org.json:json-20180813", "similarityId": null, "fixResolutionText": "20231013", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-45689", "cveName": "CVE-2022-45689", "score": 7.5, "severity": "High", "publishDate": "2022-12-13T15:15:00", "references": ["https://github.com/advisories/GHSA-fxrc-hg6j-6v3x", "https://github.com/dromara/hutool/issues/2747", "https://github.com/stleary/JSON-java/issues/654", "https://github.com/dromara/hutool/commit/d8283fedb0e4c6b159e3f8a1b1ed168167d924da", "https://github.com/stleary/JSON-java/commit/c33ad9c06294961e7cf8d0f47ecc837342bdddc6", "https://github.com/stleary/JSON-java/pull/660"], "referencesData": [{"url": "https://github.com/advisories/GHSA-fxrc-hg6j-6v3x", "type": "Advisory", "comment": ""}, {"url": "https://github.com/dromara/hutool/issues/2747", "type": "Issue", "comment": "Issue in hutool"}, {"url": "https://github.com/stleary/JSON-java/issues/654", "type": "Issue", "comment": "Issue in JSON-java"}, {"url": "https://github.com/dromara/hutool/commit/d8283fedb0e4c6b159e3f8a1b1ed168167d924da", "type": "Commit", "comment": "Fix in hutool"}, {"url": "https://github.com/stleary/JSON-java/commit/c33ad9c06294961e7cf8d0f47ecc837342bdddc6", "type": "Commit", "comment": "Fix in JSON-java"}, {"url": "https://github.com/stleary/JSON-java/pull/660", "type": "Pull request", "comment": "PR in JSON-java"}], "description": "hutool-json was discovered to contain an Out-of-Memory error. This vulnerability affects \"cn.hutool:hutool-json\" package versions prior to 5.8.11, and \"org.json:json\" package versions prior to 20211205.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-org.json:json-20180813", "similarityId": null, "fixResolutionText": "20231013", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-45690", "cveName": "CVE-2022-45690", "score": 7.5, "severity": "High", "publishDate": "2022-12-13T15:15:11", "references": ["https://github.com/advisories/GHSA-whgh-g24c-3j5q", "https://github.com/stleary/JSON-java/issues/654", "https://github.com/dromara/hutool/commit/d8283fedb0e4c6b159e3f8a1b1ed168167d924da", "https://github.com/dromara/hutool/issues/2746", "https://github.com/stleary/JSON-java/commit/c33ad9c06294961e7cf8d0f47ecc837342bdddc6", "https://github.com/stleary/JSON-java/pull/660"], "referencesData": [{"url": "https://github.com/advisories/GHSA-whgh-g24c-3j5q", "type": "Advisory", "comment": ""}, {"url": "https://github.com/stleary/JSON-java/issues/654", "type": "Issue", "comment": "Issue in JSON-java"}, {"url": "https://github.com/dromara/hutool/commit/d8283fedb0e4c6b159e3f8a1b1ed168167d924da", "type": "Commit", "comment": "Fix in Hutool "}, {"url": "https://github.com/dromara/hutool/issues/2746", "type": "Issue", "comment": "Issue in Hutool "}, {"url": "https://github.com/stleary/JSON-java/commit/c33ad9c06294961e7cf8d0f47ecc837342bdddc6", "type": "Commit", "comment": "Fix in JSON-java"}, {"url": "https://github.com/stleary/JSON-java/pull/660", "type": "Pull request", "comment": "PR in JSON-java"}], "description": "A stack overflow in the \"org.json.JSONTokener.nextValue::JSONTokener.java\" component of hutool-json allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data. This vulnerability affects \"cn.hutool:hutool-json\" package versions prior to 5.8.11, and \"org.json:json\" package versions prior to 20220320.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-org.json:json-20180813", "similarityId": null, "fixResolutionText": "20231013", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "Cxdb5a1032-eda2", "cveName": "Cxdb5a1032-eda2", "score": 7.5, "severity": "High", "publishDate": "2019-09-17T10:37:00", "references": ["https://github.com/stleary/JSON-java/issues/484", "https://github.com/stleary/JSON-java/pull/485", "https://github.com/stleary/JSON-java/commit/5b62cf13ff30c311df1d33f27447e1976d8296b7"], "referencesData": [{"url": "https://github.com/stleary/JSON-java/issues/484", "type": "Issue", "comment": ""}, {"url": "https://github.com/stleary/JSON-java/pull/485", "type": "Pull request", "comment": ""}, {"url": "https://github.com/stleary/JSON-java/commit/5b62cf13ff30c311df1d33f27447e1976d8296b7", "type": "Commit", "comment": ""}], "description": "The package `JSON-java` before 20200518 is vulnerable to Denial Of Service. The function `nextMeta` in the file `XMLTokener.java` runs into an infinite loop as the `JSONTokener.nextMeta()` function returns the same character repeatedly and never advances the Tokener index. Due to this flaw, the availability of the application is affected.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-org.json:json-20180813", "similarityId": null, "fixResolutionText": "20231013", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-835", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2024-21634", "cveName": "CVE-2024-21634", "score": 7.5, "severity": "High", "publishDate": "2024-01-03T23:15:08", "references": ["https://github.com/advisories/GHSA-264p-99wq-f4j6", "https://github.com/amazon-ion/ion-java/releases/tag/v1.10.5"], "referencesData": [{"url": "https://github.com/advisories/GHSA-264p-99wq-f4j6", "type": "Advisory", "comment": ""}, {"url": "https://github.com/amazon-ion/ion-java/releases/tag/v1.10.5", "type": "Release Note", "comment": ""}], "description": "Amazon Ion is a Java implementation of the Ion data notation. In versions prior to 1.10.5, a potential Denial-of-Service (DoS) attack issue exists in `ion-java` for applications that use `ion-java` to deserialize Ion text encoded data, or deserialize Ion text or binary encoded data into the `IonValue` model and then invoke certain `IonValue` methods on that in-memory representation. An actor could craft Ion data that, when loaded by the affected application and/or processed using the `IonValue` model, results in a `StackOverflowError` originating from the `ion-java` library. As a workaround, do not load data that originated from an untrusted source or that could have been tampered with.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-software.amazon.ion:ion-java-1.0.2", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-34169", "cveName": "CVE-2022-34169", "score": 7.5, "severity": "High", "publishDate": "2022-07-19T09:56:00", "references": ["https://github.com/advisories/GHSA-9339-86wc-4qgf", "https://lists.apache.org/thread/12pxy4phsry6c34x2ol4fft6xlho4kyw"], "referencesData": [{"url": "https://github.com/advisories/GHSA-9339-86wc-4qgf", "type": "Advisory", "comment": ""}, {"url": "https://lists.apache.org/thread/12pxy4phsry6c34x2ol4fft6xlho4kyw", "type": "Mail Thread", "comment": ""}], "description": "The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. The Apache Xalan Java project is dormant and in the process of being retired. No future releases of Apache Xalan Java to address this issue are expected. This issues affect versions prior to 2.7.3. Note: Java runtimes (such as OpenJDK) include repackaged copies of Xalan. ", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Maven-xalan:xalan-2.7.2", "similarityId": null, "fixResolutionText": "2.7.3", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-681", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2022-23437", "cveName": "CVE-2022-23437", "score": 6.5, "severity": "Medium", "publishDate": "2022-01-24T15:15:00", "references": ["https://github.com/advisories/GHSA-h65f-jvqw-m9fj", "https://lists.apache.org/thread/6pjwm10bb69kq955fzr1n0nflnjd27dl", "https://svn.apache.org/viewvc?view=revision&revision=1897143", "https://github.com/advisories/GHSA-xxx9-3xcr-gjj3"], "referencesData": [{"url": "https://github.com/advisories/GHSA-h65f-jvqw-m9fj", "type": "Advisory", "comment": ""}, {"url": "https://lists.apache.org/thread/6pjwm10bb69kq955fzr1n0nflnjd27dl", "type": "Mail Thread", "comment": ""}, {"url": "https://svn.apache.org/viewvc?view=revision&revision=1897143", "type": "Commit", "comment": ""}, {"url": "https://github.com/advisories/GHSA-xxx9-3xcr-gjj3", "type": "Advisory", "comment": ""}], "description": "There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-xerces:xercesImpl-2.12.0", "similarityId": null, "fixResolutionText": "2.12.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-91", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2020-14338", "cveName": "CVE-2020-14338", "score": 5.3, "severity": "Medium", "publishDate": "2020-09-17T15:15:00", "references": ["https://github.com/advisories/GHSA-w4jq-qh47-hvjq", "https://github.com/jboss/xerces/commit/76348d1f67c20a658ff47ba009762372a7a47300", "https://bugzilla.redhat.com/show_bug.cgi?id=1860054", "https://lists.apache.org/thread.html/rf96c5afb26b596b4b97883aa90b6c0b0fc4c26aaeea7123c21912103@"], "referencesData": [{"url": "https://github.com/advisories/GHSA-w4jq-qh47-hvjq", "type": "Advisory", "comment": ""}, {"url": "https://github.com/jboss/xerces/commit/76348d1f67c20a658ff47ba009762372a7a47300", "type": "Commit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1860054", "type": "Issue", "comment": ""}, {"url": "https://lists.apache.org/thread.html/rf96c5afb26b596b4b97883aa90b6c0b0fc4c26aaeea7123c21912103@%3Cj-users.xerces.apache.org%3E", "type": "Mail Thread", "comment": ""}], "description": "A flaw was found in Xerces, specifically in the way the XMLSchemaValidator class. This flaw allows a specially-crafted XML file to manipulate the validation process in certain cases. This issue is the same flaw as CVE-2020-14621, which affected OpenJDK, and uses a similar code. This flaw is fixed in versions jboss-2.11.0.SP6 and 2.12.0.SP3 that are available on GitHub.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Maven-xerces:xercesImpl-2.12.0", "similarityId": null, "fixResolutionText": "2.12.2", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-20", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ant-man", "_project_name": "inmobi-glance/ant-man"}, {"id": "CVE-2019-9423", "cveName": "CVE-2019-9423", "score": 7.8, "severity": "High", "publishDate": "2019-09-27T19:15:28", "references": ["https://github.com/advisories/GHSA-8849-5h85-98qw", "https://www.openwall.com/lists/oss-security/2019/11/07/1", "https://github.com/opencv/opencv/issues/20239", "https://source.android.com/security/bulletin/android-10"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8849-5h85-98qw", "type": "Advisory", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2019/11/07/1", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/opencv/opencv/issues/20239", "type": "Issue", "comment": ""}, {"url": "https://source.android.com/security/bulletin/android-10", "type": "Advisory", "comment": ""}], "description": "In opencv calls that use libpng, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616", "cvss": {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 4.6, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.11.0.86", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "gaming-ai-reikonface", "_project_name": "inmobi-glance/gaming-ai-reikonface"}, {"id": "CVE-2019-9423", "cveName": "CVE-2019-9423", "score": 7.8, "severity": "High", "publishDate": "2019-09-27T19:15:28", "references": ["https://github.com/advisories/GHSA-8849-5h85-98qw", "https://www.openwall.com/lists/oss-security/2019/11/07/1", "https://github.com/opencv/opencv/issues/20239", "https://source.android.com/security/bulletin/android-10"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8849-5h85-98qw", "type": "Advisory", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2019/11/07/1", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/opencv/opencv/issues/20239", "type": "Issue", "comment": ""}, {"url": "https://source.android.com/security/bulletin/android-10", "type": "Advisory", "comment": ""}], "description": "In opencv calls that use libpng, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616", "cvss": {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 4.6, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-headless-4.11.0.86", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "gaming-ai-reikonface", "_project_name": "inmobi-glance/gaming-ai-reikonface"}, {"id": "CVE-2025-3001", "cveName": "CVE-2025-3001", "score": 4.8, "severity": "Medium", "publishDate": "2025-03-31T16:15:27", "references": ["https://github.com/advisories/GHSA-qfhq-4f3w-5fph", "https://github.com/pytorch/pytorch/issues/149626", "https://github.com/pytorch/pytorch/blob/aec3ef100844631cb7c4ce2725157984eb9cebfe/aten/src/ATen/native/RNN.cpp#L1524"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qfhq-4f3w-5fph", "type": "Advisory", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/issues/149626", "type": "Issue", "comment": ""}, {"url": "https://github.com/pytorch/pytorch/blob/aec3ef100844631cb7c4ce2725157984eb9cebfe/aten/src/ATen/native/RNN.cpp#L1524", "type": "Vulnerable code", "comment": ""}], "description": "A vulnerability classified as critical was found in PyTorch. This vulnerability affects the function \"torch.lstm_cell\". The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.", "cvss": {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 4.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.1", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 5.3, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-torch-2.7.1", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-119", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "gaming-ai-reikonface", "_project_name": "inmobi-glance/gaming-ai-reikonface"}, {"id": "CVE-2024-55459", "cveName": "CVE-2024-55459", "score": 6.9, "severity": "Medium", "publishDate": "2025-01-08T17:15:15", "references": ["https://github.com/advisories/GHSA-cjgq-5qmw-rcj6", "https://github.com/keras-team/keras/blob/fbf0af76130beecae2273a513242255826b42c04/keras/src/utils/file_utils.py#L117", "https://river-bicycle-f1e.notion.site/Arbitrary-File-Write-Vulnerability-in-get_file-function-11888e31952580179224e50892976d32"], "referencesData": [{"url": "https://github.com/advisories/GHSA-cjgq-5qmw-rcj6", "type": "Advisory", "comment": ""}, {"url": "https://github.com/keras-team/keras/blob/fbf0af76130beecae2273a513242255826b42c04/keras/src/utils/file_utils.py#L117", "type": "Vulnerable code", "comment": ""}, {"url": "https://river-bicycle-f1e.notion.site/Arbitrary-File-Write-Vulnerability-in-get_file-function-11888e31952580179224e50892976d32", "type": "POC/Exploit", "comment": ""}], "description": "An issue in keras 3.0.0 and after allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the \"get_file\" function.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-keras-3.8.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-494", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "reference-generator", "_project_name": "inmobi-glance/reference-generator"}, {"id": "CVE-2018-7712", "cveName": "CVE-2018-7712", "score": 7.5, "severity": "High", "publishDate": "2018-03-05T23:29:00", "references": ["https://github.com/opencv/opencv/issues/10998", "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "https://bugzilla.redhat.com/show_bug.cgi?id=1553467", "https://github.com/advisories/GHSA-vh8h-jg54-v92w"], "referencesData": [{"url": "https://github.com/opencv/opencv/issues/10998", "type": "Issue", "comment": ""}, {"url": "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "type": "POC/Exploit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553467", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-vh8h-jg54-v92w", "type": "Advisory", "comment": ""}], "description": "** DISPUTED ** The \"validateInputImageSize\" function in `modules/imgcodecs/src/loadsave.cpp` in OpenCV allows remote attackers to cause a denial of service (assertion failure) because \"(size.height <= (1<<20))\" may be false. Note: according to the maintainers, OpenCV `CV_Assert` is not an assertion (C-like \"assert()\"), it is a regular C++ exception which can be raised in case of invalid or non-supported parameters. ", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.10.0.84", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-617", "isViolatingPolicy": false, "type": "Disputed", "_repo_name": "reference-generator", "_project_name": "inmobi-glance/reference-generator"}, {"id": "CVE-2018-7713", "cveName": "CVE-2018-7713", "score": 7.5, "severity": "High", "publishDate": "2018-03-05T23:29:00", "references": ["https://github.com/opencv/opencv/issues/10998", "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "https://bugzilla.redhat.com/show_bug.cgi?id=1553469", "https://github.com/advisories/GHSA-wj8j-vmwr-jqc9"], "referencesData": [{"url": "https://github.com/opencv/opencv/issues/10998", "type": "Issue", "comment": ""}, {"url": "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "type": "POC/Exploit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553469", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-wj8j-vmwr-jqc9", "type": "Advisory", "comment": ""}], "description": "** DISPUTED ** The \"validateInputImageSize\" function in \"modules/imgcodecs/src/loadsave.cpp\" in OpenCV allows remote attackers to cause a denial of service (assertion failure) because \"size.width <= (1<<20)\" may be false. Note: OpenCV \"CV_Assert\" is not an assertion (C-like \"assert()\"), it is a regular C++ exception that can be raised in case of invalid or non-supported parameters.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.10.0.84", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-617", "isViolatingPolicy": false, "type": "Disputed", "_repo_name": "reference-generator", "_project_name": "inmobi-glance/reference-generator"}, {"id": "CVE-2019-9423", "cveName": "CVE-2019-9423", "score": 7.8, "severity": "High", "publishDate": "2019-09-27T19:15:28", "references": ["https://github.com/advisories/GHSA-8849-5h85-98qw", "https://www.openwall.com/lists/oss-security/2019/11/07/1", "https://github.com/opencv/opencv/issues/20239", "https://source.android.com/security/bulletin/android-10"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8849-5h85-98qw", "type": "Advisory", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2019/11/07/1", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/opencv/opencv/issues/20239", "type": "Issue", "comment": ""}, {"url": "https://source.android.com/security/bulletin/android-10", "type": "Advisory", "comment": ""}], "description": "In opencv calls that use libpng, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616", "cvss": {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 4.6, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.10.0.84", "similarityId": null, "fixResolutionText": "4.11.0.86", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "reference-generator", "_project_name": "inmobi-glance/reference-generator"}, {"id": "CVE-2019-9423", "cveName": "CVE-2019-9423", "score": 7.8, "severity": "High", "publishDate": "2019-09-27T19:15:28", "references": ["https://github.com/advisories/GHSA-8849-5h85-98qw", "https://www.openwall.com/lists/oss-security/2019/11/07/1", "https://github.com/opencv/opencv/issues/20239", "https://source.android.com/security/bulletin/android-10"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8849-5h85-98qw", "type": "Advisory", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2019/11/07/1", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/opencv/opencv/issues/20239", "type": "Issue", "comment": ""}, {"url": "https://source.android.com/security/bulletin/android-10", "type": "Advisory", "comment": ""}], "description": "In opencv calls that use libpng, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616", "cvss": {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 4.6, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-headless-4.10.0.84", "similarityId": null, "fixResolutionText": "4.11.0.86", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "reference-generator", "_project_name": "inmobi-glance/reference-generator"}, {"id": "CVE-2024-47874", "cveName": "CVE-2024-47874", "score": 0.0, "severity": "None", "publishDate": "2024-10-15T16:15:05", "references": ["https://github.com/advisories/GHSA-f96h-pmfr-66vw", "https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733", "https://github.com/encode/starlette/releases/tag/0.40.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-f96h-pmfr-66vw", "type": "Advisory", "comment": ""}, {"url": "https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733", "type": "Commit", "comment": ""}, {"url": "https://github.com/encode/starlette/releases/tag/0.40.0", "type": "Release Note", "comment": ""}], "description": "Starlette is an Asynchronous Server Gateway Interface (ASGI) framework/toolkit. In starlette package version 0.4.1 through 0.39.2, Starlette treats `multipart/form-data` parts without a `filename` as text form fields and buffers those in byte strings with no size limit. This allows an attacker to upload arbitrary large form fields and causes Starlette to both slow down significantly due to excessive memory allocations and copy operations, and also consume more and more memory until the server starts swapping and grinds to a halt, or the OS terminates the server process with an OOM error. Uploading multiple such requests in parallel may be enough to render a service practically unusable, even if reasonable request size limits are enforced by a reverse proxy in front of Starlette. This Denial of Service (DoS) vulnerability affects all applications built with Starlette (or FastAPI) accepting form requests.", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Python-starlette-0.37.2", "similarityId": null, "fixResolutionText": "0.40.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "reference-generator", "_project_name": "inmobi-glance/reference-generator"}, {"id": "Cx8bc4df28-fcf5", "cveName": "Cx8bc4df28-fcf5", "score": 3.7, "severity": "Low", "publishDate": "2020-12-10T17:14:00", "references": ["https://github.com/debug-js/debug/issues/737", "https://github.com/debug-js/debug/issues/656", "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "https://github.com/debug-js/debug/releases/tag/4.4.0"], "referencesData": [{"url": "https://github.com/debug-js/debug/issues/737", "type": "Issue", "comment": ""}, {"url": "https://github.com/debug-js/debug/issues/656", "type": "Other", "comment": "Roadmap that mentions Issue"}, {"url": "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "type": "POC/Exploit", "comment": ""}, {"url": "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "type": "Commit", "comment": ""}, {"url": "https://github.com/debug-js/debug/releases/tag/4.4.0", "type": "Release Note", "comment": ""}], "description": "In NPM \"debug\" versions prior to 4.4.0, the \"enable\" function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.", "cvss": {"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Npm-debug-3.2.7", "similarityId": null, "fixResolutionText": "4.4.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ultron", "_project_name": "inmobi-glance/ultron"}, {"id": "Cx8bc4df28-fcf5", "cveName": "Cx8bc4df28-fcf5", "score": 3.7, "severity": "Low", "publishDate": "2020-12-10T17:14:00", "references": ["https://github.com/debug-js/debug/issues/737", "https://github.com/debug-js/debug/issues/656", "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "https://github.com/debug-js/debug/releases/tag/4.4.0"], "referencesData": [{"url": "https://github.com/debug-js/debug/issues/737", "type": "Issue", "comment": ""}, {"url": "https://github.com/debug-js/debug/issues/656", "type": "Other", "comment": "Roadmap that mentions Issue"}, {"url": "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2020/Cx8bc4df28-fcf5", "type": "POC/Exploit", "comment": ""}, {"url": "https://github.com/debug-js/debug/commit/d2d6bf0bab3a0eeeb3a9ce7113cb0a31d8da678f", "type": "Commit", "comment": ""}, {"url": "https://github.com/debug-js/debug/releases/tag/4.4.0", "type": "Release Note", "comment": ""}], "description": "In NPM \"debug\" versions prior to 4.4.0, the \"enable\" function accepts a regular expression from user input without escaping it. Arbitrary regular expressions could be injected to cause a Denial of Service attack on the user's browser, otherwise known as a ReDoS (Regular Expression Denial of Service). This is a different issue than CVE-2017-16137.", "cvss": {"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}, "cvssList": [{"score": 3.7, "attackVector": "NETWORK", "attackComplexity": "HIGH", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Low", "cvss3Severity": "Low"}], "recommendations": null, "packageId": "Npm-debug-4.3.7", "similarityId": null, "fixResolutionText": "4.4.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-1333", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ultron", "_project_name": "inmobi-glance/ultron"}, {"id": "Cxdca8e59f-8bfe", "cveName": "Cxdca8e59f-8bfe", "score": 7.5, "severity": "High", "publishDate": "2020-12-07T10:10:00", "references": ["https://github.com/npm/inflight/issues/5"], "referencesData": [{"url": "https://github.com/npm/inflight/issues/5", "type": "Issue", "comment": ""}], "description": "In NPM `inflight` there is a Memory Leak because some resources are not freed correctly after being used. It appears to affect all versions, as the issue was not addressed and no fix is found. NOTE: In the meantime, `logdna-agent`, a package that depends on `inflight`, has merged a commit to address this solely in their package (so it should be fixed in `logdna-agent` in versions 1.6.5 and later). `Node-glob`, a package that also depends on `inflight`, was also planning to address this by not using `inflight` after version 8 is released, but it is still being used.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Npm-inflight-1.0.6", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-772", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ultron", "_project_name": "inmobi-glance/ultron"}, {"id": "CVE-2024-55565", "cveName": "CVE-2024-55565", "score": 6.3, "severity": "Medium", "publishDate": "2024-12-09T02:15:00", "references": ["https://github.com/advisories/GHSA-mwcw-c2x4-8c55", "https://github.com/ai/nanoid/pull/510", "https://github.com/ai/nanoid/commit/d643045f40d6dc8afa000a644d857da1436ed08c", "https://github.com/ai/nanoid/releases/tag/5.0.9"], "referencesData": [{"url": "https://github.com/advisories/GHSA-mwcw-c2x4-8c55", "type": "Advisory", "comment": ""}, {"url": "https://github.com/ai/nanoid/pull/510", "type": "Pull request", "comment": ""}, {"url": "https://github.com/ai/nanoid/commit/d643045f40d6dc8afa000a644d857da1436ed08c", "type": "Commit", "comment": ""}, {"url": "https://github.com/ai/nanoid/releases/tag/5.0.9", "type": "Release Note", "comment": ""}], "description": "The package nanoid versions through 3.3.7 and 4.0.0 through 5.0.8 mishandle non-integer values. ", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Npm-nanoid-3.3.7", "similarityId": null, "fixResolutionText": "3.3.8", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-835", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ultron", "_project_name": "inmobi-glance/ultron"}, {"id": "CVE-2024-56332", "cveName": "CVE-2024-56332", "score": 5.3, "severity": "Medium", "publishDate": "2025-01-03T21:15:13", "references": ["https://github.com/advisories/GHSA-7m27-7ghc-44w9"], "referencesData": [{"url": "https://github.com/advisories/GHSA-7m27-7ghc-44w9", "type": "Advisory", "comment": ""}], "description": "Next.js is a React framework for building full-stack web applications. Starting in version 13.0.0 through 13.5.7, 14.0.0 through 14.2.20, and 15.0.0 through 15.1.1 Next.js is vulnerable to a Denial of Service (DoS) attack that allows attackers to construct requests that leave requests to Server Actions hanging until the hosting provider cancels the function execution. This vulnerability can also be used as a Denial of Wallet (DoW) attack when deployed in providers billing by response times. (Note: Next.js server is idle during that time and only keeps the connection open. CPU and memory footprint are low during that time.). Deployments without any protection against long-running Server Action invocations are especially vulnerable. Hosting providers like Vercel or Netlify set a default maximum duration on function execution to reduce the risk of excessive billing. This is the same issue as if the incoming HTTP request has an invalid `Content-Length` header or never closes. If the host has no other mitigations, then this vulnerability is novel. This vulnerability affects only Next.js deployments using Server Actions.", "cvss": {"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 5.3, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "LOW", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Npm-next-14.2.18", "similarityId": null, "fixResolutionText": "14.2.21", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "ultron", "_project_name": "inmobi-glance/ultron"}, {"id": "CVE-2024-48052", "cveName": "CVE-2024-48052", "score": 7.1, "severity": "High", "publishDate": "2024-11-04T23:15:04", "references": ["https://rumbling-slice-eb0.notion.site/FULL-SSRF-in-gr-DownloadButton-in-gradio-app-gradio-870b21e0908b48cbafd914719ac1a4e6?pvs=4", "https://github.com/advisories/GHSA-3gf9-wv65-gwh9", "https://gist.github.com/AfterSnows/45ffc23797f9127e00755376cc610e12"], "referencesData": [{"url": "https://rumbling-slice-eb0.notion.site/FULL-SSRF-in-gr-DownloadButton-in-gradio-app-gradio-870b21e0908b48cbafd914719ac1a4e6?pvs=4", "type": "Blog Post", "comment": ""}, {"url": "https://github.com/advisories/GHSA-3gf9-wv65-gwh9", "type": "Advisory", "comment": ""}, {"url": "https://gist.github.com/AfterSnows/45ffc23797f9127e00755376cc610e12", "type": "Disclosure", "comment": ""}], "description": "In gradio the \"gr.DownloadButton\" function has a hidden server-side request forgery (SSRF) vulnerability. The reason is that within the \"save_url_to_cache\" function, there are no restrictions on the URL, which allows access to local target resources. This can lead to the download of local resources and sensitive information.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-gradio-5.1.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-918", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-product-segmentation-service", "_project_name": "inmobi-glance/aip-surfaceart-product-segmentation-service"}, {"id": "CVE-2024-4940", "cveName": "CVE-2024-4940", "score": 6.1, "severity": "Medium", "publishDate": "2024-06-22T06:15:11", "references": ["https://github.com/advisories/GHSA-g6c9-f4xm-9j4x", "https://huntr.com/bounties/35aaea93-6895-4f03-9c1b-cd992665aa60", "https://github.com/gradio-app/gradio/blob/38963984800d58bfad81bc928f2d631cb4bac773/gradio/routes.py#L526"], "referencesData": [{"url": "https://github.com/advisories/GHSA-g6c9-f4xm-9j4x", "type": "Advisory", "comment": ""}, {"url": "https://huntr.com/bounties/35aaea93-6895-4f03-9c1b-cd992665aa60", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/gradio-app/gradio/blob/38963984800d58bfad81bc928f2d631cb4bac773/gradio/routes.py#L526", "type": "Vulnerable code", "comment": ""}], "description": "An Open Redirect vulnerability exists in the gradio-app/gradio, affecting the latest version. The vulnerability allows an attacker to redirect users to arbitrary websites, which can be exploited for phishing attacks, Cross-site Scripting (XSS), and Server-Side Request Forgery (SSRF), amongst others. This issue is due to improper validation of user-supplied input in the handling of URLs. Attackers can exploit this vulnerability by crafting a malicious URL that, when processed by the application, redirects the user to an attacker-controlled web page.", "cvss": {"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}, "cvssList": [{"score": 6.1, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "LOW", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-gradio-5.1.0", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-601", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-product-segmentation-service", "_project_name": "inmobi-glance/aip-surfaceart-product-segmentation-service"}, {"id": "CVE-2024-51751", "cveName": "CVE-2024-51751", "score": 8.2, "severity": "High", "publishDate": "2024-11-06T20:15:05", "references": ["https://github.com/advisories/GHSA-rhm9-gp5p-5248", "https://github.com/gradio-app/gradio/releases/tag/gradio%405.5.0", "https://github.com/gradio-app/gradio/commit/dcfa7ad3e819002c0213a592ad726ccfd9e2bf0c", "https://github.com/gradio-app/gradio/pull/9898"], "referencesData": [{"url": "https://github.com/advisories/GHSA-rhm9-gp5p-5248", "type": "Advisory", "comment": ""}, {"url": "https://github.com/gradio-app/gradio/releases/tag/gradio%405.5.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/gradio-app/gradio/commit/dcfa7ad3e819002c0213a592ad726ccfd9e2bf0c", "type": "Commit", "comment": ""}, {"url": "https://github.com/gradio-app/gradio/pull/9898", "type": "Pull request", "comment": ""}], "description": "Gradio is an open-source Python package designed to enable quick builds of a demo or web application. If \"File\" or \"UploadButton\" components are used as a part of Gradio application to preview file content, an attacker with access to the application might abuse these components to read arbitrary files from the application server. There are no known workarounds for this vulnerability. This issue affects versions 4.0.1 through 5.4.0.", "cvss": {"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 6.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "Medium", "cvss3Severity": "Medium"}], "recommendations": null, "packageId": "Python-gradio-5.1.0", "similarityId": null, "fixResolutionText": "5.5.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-22", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-product-segmentation-service", "_project_name": "inmobi-glance/aip-surfaceart-product-segmentation-service"}, {"id": "CVE-2025-23042", "cveName": "CVE-2025-23042", "score": 8.7, "severity": "High", "publishDate": "2025-01-14T19:15:44", "references": ["https://github.com/advisories/GHSA-j2jg-fq62-7c3h", "https://github.com/gradio-app/gradio/commit/6b63fdec441b5c9bf910f910a2505d8defbb6bf8", "https://github.com/gradio-app/gradio/pull/10304", "https://github.com/gradio-app/gradio/releases/tag/gradio%405.11.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-j2jg-fq62-7c3h", "type": "Advisory", "comment": ""}, {"url": "https://github.com/gradio-app/gradio/commit/6b63fdec441b5c9bf910f910a2505d8defbb6bf8", "type": "Commit", "comment": ""}, {"url": "https://github.com/gradio-app/gradio/pull/10304", "type": "Pull request", "comment": ""}, {"url": "https://github.com/gradio-app/gradio/releases/tag/gradio%405.11.0", "type": "Release Note", "comment": ""}], "description": "Gradio is an open-source Python package that allows quick building of demos and web applications for machine learning models, API, or any arbitrary Python function. Gradio's Access Control List (ACL) for file paths can be bypassed by altering the letter case of a blocked file or directory path. This vulnerability arises due to the lack of case normalization in the file path validation logic. On case-insensitive file systems, such as those used by Windows and macOS, this flaw enables attackers to circumvent security restrictions and access sensitive files that should be protected. This issue can lead to unauthorized data access, exposing sensitive information, and undermining the integrity of Gradio's security model. Given Gradio's popularity for building web applications, particularly in machine learning and AI, this vulnerability may pose a substantial threat if exploited in production environments. This issue affects the gradio versions prior to 5.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-gradio-5.1.0", "similarityId": null, "fixResolutionText": "5.11.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-285", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-product-segmentation-service", "_project_name": "inmobi-glance/aip-surfaceart-product-segmentation-service"}, {"id": "CVE-2024-1135", "cveName": "CVE-2024-1135", "score": 7.5, "severity": "High", "publishDate": "2024-04-16T00:15:00", "references": ["https://github.com/advisories/GHSA-w3h3-4rj7-4ph4", "https://huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1", "https://github.com/benoitc/gunicorn/releases/tag/22.0.0", "https://github.com/benoitc/gunicorn/pull/3113", "https://github.com/benoitc/gunicorn/commit/ac29c9b0a758d21f1e0fb3b3457239e523fa9f1d"], "referencesData": [{"url": "https://github.com/advisories/GHSA-w3h3-4rj7-4ph4", "type": "Advisory", "comment": ""}, {"url": "https://huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/benoitc/gunicorn/releases/tag/22.0.0", "type": "Release Note", "comment": ""}, {"url": "https://github.com/benoitc/gunicorn/pull/3113", "type": "Pull request", "comment": ""}, {"url": "https://github.com/benoitc/gunicorn/commit/ac29c9b0a758d21f1e0fb3b3457239e523fa9f1d", "type": "Commit", "comment": ""}], "description": "Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure. This vulnerability affects gunicorn package versions 0.10.0 through 21.2.0.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "NONE", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-gunicorn-20.1.0", "similarityId": null, "fixResolutionText": "22.0.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-444", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-product-segmentation-service", "_project_name": "inmobi-glance/aip-surfaceart-product-segmentation-service"}, {"id": "CVE-2018-7712", "cveName": "CVE-2018-7712", "score": 7.5, "severity": "High", "publishDate": "2018-03-05T23:29:00", "references": ["https://github.com/opencv/opencv/issues/10998", "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "https://bugzilla.redhat.com/show_bug.cgi?id=1553467", "https://github.com/advisories/GHSA-vh8h-jg54-v92w"], "referencesData": [{"url": "https://github.com/opencv/opencv/issues/10998", "type": "Issue", "comment": ""}, {"url": "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "type": "POC/Exploit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553467", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-vh8h-jg54-v92w", "type": "Advisory", "comment": ""}], "description": "** DISPUTED ** The \"validateInputImageSize\" function in `modules/imgcodecs/src/loadsave.cpp` in OpenCV allows remote attackers to cause a denial of service (assertion failure) because \"(size.height <= (1<<20))\" may be false. Note: according to the maintainers, OpenCV `CV_Assert` is not an assertion (C-like \"assert()\"), it is a regular C++ exception which can be raised in case of invalid or non-supported parameters. ", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.10.0.84", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-617", "isViolatingPolicy": false, "type": "Disputed", "_repo_name": "aip-surfaceart-product-segmentation-service", "_project_name": "inmobi-glance/aip-surfaceart-product-segmentation-service"}, {"id": "CVE-2018-7713", "cveName": "CVE-2018-7713", "score": 7.5, "severity": "High", "publishDate": "2018-03-05T23:29:00", "references": ["https://github.com/opencv/opencv/issues/10998", "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "https://bugzilla.redhat.com/show_bug.cgi?id=1553469", "https://github.com/advisories/GHSA-wj8j-vmwr-jqc9"], "referencesData": [{"url": "https://github.com/opencv/opencv/issues/10998", "type": "Issue", "comment": ""}, {"url": "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "type": "POC/Exploit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553469", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-wj8j-vmwr-jqc9", "type": "Advisory", "comment": ""}], "description": "** DISPUTED ** The \"validateInputImageSize\" function in \"modules/imgcodecs/src/loadsave.cpp\" in OpenCV allows remote attackers to cause a denial of service (assertion failure) because \"size.width <= (1<<20)\" may be false. Note: OpenCV \"CV_Assert\" is not an assertion (C-like \"assert()\"), it is a regular C++ exception that can be raised in case of invalid or non-supported parameters.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.10.0.84", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-617", "isViolatingPolicy": false, "type": "Disputed", "_repo_name": "aip-surfaceart-product-segmentation-service", "_project_name": "inmobi-glance/aip-surfaceart-product-segmentation-service"}, {"id": "CVE-2019-9423", "cveName": "CVE-2019-9423", "score": 7.8, "severity": "High", "publishDate": "2019-09-27T19:15:28", "references": ["https://github.com/advisories/GHSA-8849-5h85-98qw", "https://www.openwall.com/lists/oss-security/2019/11/07/1", "https://github.com/opencv/opencv/issues/20239", "https://source.android.com/security/bulletin/android-10"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8849-5h85-98qw", "type": "Advisory", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2019/11/07/1", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/opencv/opencv/issues/20239", "type": "Issue", "comment": ""}, {"url": "https://source.android.com/security/bulletin/android-10", "type": "Advisory", "comment": ""}], "description": "In opencv calls that use libpng, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616", "cvss": {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 4.6, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.10.0.84", "similarityId": null, "fixResolutionText": "4.11.0.86", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-product-segmentation-service", "_project_name": "inmobi-glance/aip-surfaceart-product-segmentation-service"}, {"id": "CVE-2019-9423", "cveName": "CVE-2019-9423", "score": 7.8, "severity": "High", "publishDate": "2019-09-27T19:15:28", "references": ["https://github.com/advisories/GHSA-8849-5h85-98qw", "https://www.openwall.com/lists/oss-security/2019/11/07/1", "https://github.com/opencv/opencv/issues/20239", "https://source.android.com/security/bulletin/android-10"], "referencesData": [{"url": "https://github.com/advisories/GHSA-8849-5h85-98qw", "type": "Advisory", "comment": ""}, {"url": "https://www.openwall.com/lists/oss-security/2019/11/07/1", "type": "Mail Thread", "comment": ""}, {"url": "https://github.com/opencv/opencv/issues/20239", "type": "Issue", "comment": ""}, {"url": "https://source.android.com/security/bulletin/android-10", "type": "Advisory", "comment": ""}], "description": "In opencv calls that use libpng, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616", "cvss": {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 4.6, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "PARTIAL", "availability": "PARTIAL", "exploitCodeMaturity": "3.9", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.8, "attackVector": "LOCAL", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-headless-4.10.0.84", "similarityId": null, "fixResolutionText": "4.11.0.86", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-787", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-product-segmentation-service", "_project_name": "inmobi-glance/aip-surfaceart-product-segmentation-service"}, {"id": "CVE-2024-47874", "cveName": "CVE-2024-47874", "score": 0.0, "severity": "None", "publishDate": "2024-10-15T16:15:05", "references": ["https://github.com/advisories/GHSA-f96h-pmfr-66vw", "https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733", "https://github.com/encode/starlette/releases/tag/0.40.0"], "referencesData": [{"url": "https://github.com/advisories/GHSA-f96h-pmfr-66vw", "type": "Advisory", "comment": ""}, {"url": "https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733", "type": "Commit", "comment": ""}, {"url": "https://github.com/encode/starlette/releases/tag/0.40.0", "type": "Release Note", "comment": ""}], "description": "Starlette is an Asynchronous Server Gateway Interface (ASGI) framework/toolkit. In starlette package version 0.4.1 through 0.39.2, Starlette treats `multipart/form-data` parts without a `filename` as text form fields and buffers those in byte strings with no size limit. This allows an attacker to upload arbitrary large form fields and causes Starlette to both slow down significantly due to excessive memory allocations and copy operations, and also consume more and more memory until the server starts swapping and grinds to a halt, or the OS terminates the server process with an OOM error. Uploading multiple such requests in parallel may be enough to render a service practically unusable, even if reasonable request size limits are enforced by a reverse proxy in front of Starlette. This Denial of Service (DoS) vulnerability affects all applications built with Starlette (or FastAPI) accepting form requests.", "cvss": null, "cvssList": [], "recommendations": null, "packageId": "Python-starlette-0.37.2", "similarityId": null, "fixResolutionText": "0.40.0", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-770", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-product-segmentation-service", "_project_name": "inmobi-glance/aip-surfaceart-product-segmentation-service"}, {"id": "CVE-2024-11392", "cveName": "CVE-2024-11392", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-qxrp-vhvm-j765", "https://www.zerodayinitiative.com/advisories/ZDI-24-1513/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "https://github.com/huggingface/transformers/pull/35296"], "referencesData": [{"url": "https://github.com/advisories/GHSA-qxrp-vhvm-j765", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1513/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}], "description": "transformers package is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of configuration files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-24322. This issue affects versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11393 and CVE-2024-11394.", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.44.2", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-product-segmentation-service", "_project_name": "inmobi-glance/aip-surfaceart-product-segmentation-service"}, {"id": "CVE-2024-11393", "cveName": "CVE-2024-11393", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-wrfc-pvp9-mr9g", "https://www.zerodayinitiative.com/advisories/ZDI-24-1514/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "https://github.com/huggingface/transformers/pull/35296"], "referencesData": [{"url": "https://github.com/advisories/GHSA-wrfc-pvp9-mr9g", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1514/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}], "description": "transformers package \"MaskFormer\" model is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-25191. This issue affects transformers versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11394 and CVE-2024-11392.", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.44.2", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-product-segmentation-service", "_project_name": "inmobi-glance/aip-surfaceart-product-segmentation-service"}, {"id": "CVE-2024-11394", "cveName": "CVE-2024-11394", "score": 8.8, "severity": "High", "publishDate": "2024-11-22T22:15:00", "references": ["https://github.com/advisories/GHSA-hxxf-235m-72v3", "https://www.zerodayinitiative.com/advisories/ZDI-24-1515/", "https://github.com/huggingface/transformers/issues/34840", "https://github.com/huggingface/transformers/pull/35296", "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d"], "referencesData": [{"url": "https://github.com/advisories/GHSA-hxxf-235m-72v3", "type": "Advisory", "comment": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1515/", "type": "Disclosure", "comment": ""}, {"url": "https://github.com/huggingface/transformers/issues/34840", "type": "Issue", "comment": ""}, {"url": "https://github.com/huggingface/transformers/pull/35296", "type": "Pull request", "comment": ""}, {"url": "https://github.com/huggingface/transformers/commit/e0ae9b59747445d6e470e04dc3ed45128123ee4d", "type": "Commit", "comment": ""}], "description": "transformers package \"Trax Model\" is vulnerable to Deserialization of Untrusted Data, which could lead to Remote Code Execution. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. This vulnerability was assigned to ZDI-CAN-25012. This issue affects versions prior to 4.48.0. NOTE: This shares the same fix commit with CVE-2024-11393 and CVE-2024-11392. ", "cvss": {"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 8.8, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "HIGH", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-transformers-4.44.2", "similarityId": null, "fixResolutionText": "4.48.1", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-502", "isViolatingPolicy": false, "type": "Regular", "_repo_name": "aip-surfaceart-product-segmentation-service", "_project_name": "inmobi-glance/aip-surfaceart-product-segmentation-service"}, {"id": "CVE-2018-7713", "cveName": "CVE-2018-7713", "score": 7.5, "severity": "High", "publishDate": "2018-03-05T23:29:00", "references": ["https://github.com/opencv/opencv/issues/10998", "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "https://bugzilla.redhat.com/show_bug.cgi?id=1553469", "https://github.com/advisories/GHSA-wj8j-vmwr-jqc9"], "referencesData": [{"url": "https://github.com/opencv/opencv/issues/10998", "type": "Issue", "comment": ""}, {"url": "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "type": "POC/Exploit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553469", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-wj8j-vmwr-jqc9", "type": "Advisory", "comment": ""}], "description": "** DISPUTED ** The \"validateInputImageSize\" function in \"modules/imgcodecs/src/loadsave.cpp\" in OpenCV allows remote attackers to cause a denial of service (assertion failure) because \"size.width <= (1<<20)\" may be false. Note: OpenCV \"CV_Assert\" is not an assertion (C-like \"assert()\"), it is a regular C++ exception that can be raised in case of invalid or non-supported parameters.", "cvss": {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}, "cvssList": [{"score": 5.0, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "PARTIAL", "exploitCodeMaturity": "10", "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 2.0, "severity": "Medium", "cvss3Severity": null}, {"score": 7.5, "attackVector": "NETWORK", "attackComplexity": "LOW", "confidentiality": "NONE", "availability": "HIGH", "exploitCodeMaturity": null, "remediationLevel": null, "reportConfidence": null, "confidentialityRequirement": null, "integrityRequirement": null, "availabilityRequirement": null, "version": 3.0, "severity": "High", "cvss3Severity": "High"}], "recommendations": null, "packageId": "Python-opencv-python-4.11.0.86", "similarityId": null, "fixResolutionText": "", "isIgnored": false, "exploitableMethods": [], "cwe": "CWE-617", "isViolatingPolicy": false, "type": "Disputed", "_repo_name": "aip-surfaceart-cloth-overlay-service", "_project_name": "inmobi-glance/aip-surfaceart-cloth-overlay-service"}, {"id": "CVE-2018-7712", "cveName": "CVE-2018-7712", "score": 7.5, "severity": "High", "publishDate": "2018-03-05T23:29:00", "references": ["https://github.com/opencv/opencv/issues/10998", "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "https://bugzilla.redhat.com/show_bug.cgi?id=1553467", "https://github.com/advisories/GHSA-vh8h-jg54-v92w"], "referencesData": [{"url": "https://github.com/opencv/opencv/issues/10998", "type": "Issue", "comment": ""}, {"url": "https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert", "type": "POC/Exploit", "comment": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553467", "type": "Issue", "comment": ""}, {"url": "https://github.com/advisories/GHSA-vh8h-jg54-v92w", "type": "Advisory", "comment": ""}], "description": "** DISPUTED ** The \"validateInputImageSize\" function in `modules/imgcodecs/src/loadsave.cpp` in OpenCV allows remote attackers to cause a denial of service (assertion failure) because \"(size.height <= (1<<